suse-su-2024:1644-1
Vulnerability from csaf_suse
Published
2024-05-14 14:29
Modified
2024-05-14 14:29
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
- CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
- CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
- CVE-2024-27042: Fixed drm/amdgpu for potential out-of-bounds access in amdgpu_discovery_reg_base_init() (bsc#1223823).
- CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
- CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
- CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
- CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
- CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
- CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
- CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
- CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
- CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
- CVE-2024-26939: Fixed drm/i915/vma UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
- CVE-2024-26915: Fixed drm/amdgpu reset IH OVERFLOW_CLEAR bit (bsc#1223207).
- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
- CVE-2024-26898: Fixed aoe potential use-after-free problem in aoecmd_cfg_pkts (bsc#1223016).
- CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
- CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
- CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
- CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
- CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
- CVE-2024-26876: Fixed drm/bridge/adv7511 crash on irq during probe (bsc#1223119).
- CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
- CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
- CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
- CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
- CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
- CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
- CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
- CVE-2024-26830: Fixed i40e to not allow untrusted VF to remove administratively set MAC (bsc#1223012).
- CVE-2024-26817: Fixed amdkfd to use calloc instead of kzalloc to avoid integer overflow (bsc#1222812).
- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
- CVE-2024-26791: Fixed btrfs/dev-replace properly validate device names (bsc#1222793).
- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
- CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
- CVE-2024-26700: Fixed drm/amd/display MST Null pointer dereference for RV (bsc#1222870).
- CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
- CVE-2024-26679: Fixed inet read sk->sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26675: Fixed ppp_async to limit MRU to 64K (bsc#1222379).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
- CVE-2023-52620: Fixed netfilter/nf_tables to disallow timeout for anonymous sets never used from userspace (bsc#1221825).
- CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
- CVE-2023-52614: Fixed PM/devfreq buffer overflow in trans_stat_show (bsc#1221617).
- CVE-2023-52593: Fixed wifi/wfx possible NULL pointer dereference in wfx_set_mfp_ap() (bsc#1221042).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
- CVE-2023-52589: Fixed media/rkisp1 IRQ disable race issue (bsc#1221084).
- CVE-2023-52585: Fixed drm/amdgpu for possible NULL pointer dereference in amdgpu_ras_query_error_status_helper() (bsc#1221080).
- CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
- CVE-2022-48659: Fixed mm/slub to return errno if kmalloc() fails (bsc#1223498).
- CVE-2022-48658: Fixed mm/slub to avoid a problem in flush_cpu_slab()/__free_slab() task context (bsc#1223496).
- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
- CVE-2022-48642: Fixed netfilter/nf_tables percpu memory leak at nf_tables_addchain() (bsc#1223478).
- CVE-2022-48640: Fixed bonding for possible NULL pointer dereference in bond_rr_gen_slave_id (bsc#1223499).
- CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth > 0 (bsc#1223475).
- CVE-2021-47214: Fixed hugetlb/userfaultfd during restore reservation in hugetlb_mcopy_atomic_pte() (bsc#1222710).
- CVE-2021-47211: Fixed a null pointer dereference on pointer cs_desc in usb-audio (bsc#1222869).
- CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).
- CVE-2021-47205: Unregistered clocks/resets when unbinding in sunxi-ng (bsc#1222888).
- CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
- CVE-2021-47200: Fixed drm/prime for possible use-after-free in mmap within drm_gem_ttm_mmap() and drm_gem_ttm_mmap() (bsc#1222838).
- CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
- CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
- CVE-2021-47184: Fixed NULL pointer dereference on VSI filter sync (bsc#1222666).
The following non-security bugs were fixed:
- ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter (stable-fixes).
- ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC (stable-fixes).
- ALSA: hda/realtek - Fix inactive headset mic jack (stable-fixes).
- ALSA: hda/realtek: Add quirk for HP SnowWhite laptops (stable-fixes).
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU (stable-fixes).
- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support (stable-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support (stable-fixes).
- ALSA: scarlett2: Add correct product series name to messages (stable-fixes).
- ALSA: scarlett2: Add support for Clarett 8Pre USB (stable-fixes).
- ALSA: scarlett2: Default mixer driver to enabled (stable-fixes).
- ALSA: scarlett2: Move USB IDs out from device_info struct (stable-fixes).
- ASoC: meson: axg-card: make links nonatomic (git-fixes).
- ASoC: meson: axg-tdm-interface: manage formatters in trigger (git-fixes).
- ASoC: meson: cards: select SND_DYNAMIC_MINORS (git-fixes).
- ASoC: soc-core.c: Skip dummy codec when adding platforms (stable-fixes).
- ASoC: tegra: Fix DSPK 16-bit playback (git-fixes).
- ASoC: ti: davinci-mcasp: Fix race condition during probe (git-fixes).
- Bluetooth: Add new quirk for broken read key length on ATS2851 (git-fixes).
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (git-fixes).
- Bluetooth: Fix memory leak in hci_req_sync_complete() (git-fixes).
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (stable-fixes).
- Bluetooth: L2CAP: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: RFCOMM: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: SCO: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: add quirk for broken address properties (git-fixes).
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (stable-fixes).
- Bluetooth: btintel: Fixe build regression (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (stable-fixes).
- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (git-fixes).
- Bluetooth: hci_event: set the conn encrypted before conn establishes (stable-fixes).
- Bluetooth: hci_sock: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev suspend (git-fixes).
- Documentation: Add missing documentation for EXPORT_OP flags (stable-fixes).
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (git-fixes).
- HID: logitech-dj: allow mice to use all types of reports (git-fixes).
- HID: uhid: Use READ_ONCE()/WRITE_ONCE() for ->running (stable-fixes).
- Input: allocate keycode for Display refresh rate toggle (stable-fixes).
- Input: synaptics-rmi4 - fail probing if memory allocation for 'phys' fails (stable-fixes).
- NFC: trf7970a: disable all regulators on removal (git-fixes).
- PCI: rpaphp: Error out on busy status from get-sensor-state (bsc#1223369 ltc#205888).
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (git-fixes).
- Reapply 'drm/qxl: simplify qxl_fence_wait' (stable-fixes).
- Revert 'ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default' (stable-fixes).
- Revert 'drm/qxl: simplify qxl_fence_wait' (git-fixes).
- Revert 'ice: Fix ice VF reset during iavf initialization (jsc#PED-376).' (bsc#1223275)
- Revert 'usb: cdc-wdm: close race between read and workqueue' (git-fixes).
- Revert 'usb: phy: generic: Get the vbus supply' (git-fixes).
- USB: UAS: return ENODEV when submit urbs fail with device not attached (stable-fixes).
- USB: core: Add hub_get() and hub_put() routines (git-fixes).
- USB: core: Fix access violation during port device removal (git-fixes).
- USB: core: Fix deadlock in port 'disable' sysfs attribute (git-fixes).
- USB: serial: add device ID for VeriFone adapter (stable-fixes).
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (stable-fixes).
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (stable-fixes).
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (stable-fixes).
- USB: serial: option: add Fibocom FM135-GL variants (stable-fixes).
- USB: serial: option: add Lonsung U8300/U9300 product (stable-fixes).
- USB: serial: option: add MeiG Smart SLM320 product (stable-fixes).
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (stable-fixes).
- USB: serial: option: add Telit FN920C04 rmnet compositions (stable-fixes).
- USB: serial: option: add support for Fibocom FM650/FG650 (stable-fixes).
- USB: serial: option: support Quectel EM060K sub-models (stable-fixes).
- nfsd: Fixed mount kerberized nfs4 share issue (git-fixes bsc#1223858).
- s390: Fixed kernel backtrack (bsc#1141539 git-fixes).
- nfsd: Fixed mount issue with KOTD (bsc#1223380 bsc#1217408 bsc#1223640).
- s390: Fixed LPM of lpar failure with error HSCLA2CF in 19th loops (jsc#PED-542 git-fixes bsc#1213573 ltc#203238).
- ahci: asm1064: asm1166: do not limit reported ports (git-fixes).
- ahci: asm1064: correct count of reported ports (stable-fixes).
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (git-fixes)
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro (git-fixes)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 (git-fixes)
- arm64: dts: rockchip: fix rk3328 hdmi ports node (git-fixes)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (git-fixes)
- arm64: hibernate: Fix level3 translation fault in swsusp_save() (git-fixes).
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer (git-fixes).
- batman-adv: Avoid infinite loop trying to resize local TT (git-fixes).
- clk: Get runtime PM before walking tree during disable_unused (git-fixes).
- clk: Initialize struct clk_core kref earlier (stable-fixes).
- clk: Mark 'all_lists' as const (stable-fixes).
- clk: Print an info line before disabling unused clocks (stable-fixes).
- clk: Remove prepare_lock hold assertion in __clk_release() (git-fixes).
- clk: remove extra empty line (stable-fixes).
- comedi: vmk80xx: fix incomplete endpoint checking (git-fixes).
- dma: xilinx_dpdma: Fix locking (git-fixes).
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (git-fixes).
- dmaengine: owl: fix register access functions (git-fixes).
- dmaengine: tegra186: Fix residual calculation (git-fixes).
- docs: Document the FAN_FS_ERROR event (stable-fixes).
- drm-print: add drm_dbg_driver to improve namespace symmetry (stable-fixes).
- drm/amd/display: Do not recursively call manual trigger programming (stable-fixes).
- drm/amd/display: Fix nanosec stat overflow (stable-fixes).
- drm/amd/display: fix disable otg wa logic in DCN316 (stable-fixes).
- drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 (stable-fixes).
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 (stable-fixes).
- drm/amdgpu: Fix leak when GPU memory allocation fails (stable-fixes).
- drm/amdgpu: Reset dGPU if suspend got aborted (stable-fixes).
- drm/amdgpu: always force full reset for SOC21 (stable-fixes).
- drm/amdgpu: fix incorrect active rb bitmap for gfx11 (stable-fixes).
- drm/amdgpu: fix incorrect number of active RBs for gfx11 (stable-fixes).
- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (git-fixes).
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (git-fixes).
- drm/amdkfd: Reset GPU on queue preemption failure (stable-fixes).
- drm/ast: Fix soft lockup (git-fixes).
- drm/client: Fully protect modes[] with dev->mode_config.mutex (stable-fixes).
- drm/i915/cdclk: Fix CDCLK programming order when pipes are active (git-fixes).
- drm/i915/vrr: Disable VRR when using bigjoiner (stable-fixes).
- drm/i915: Disable port sync when bigjoiner is used (stable-fixes).
- drm/msm/dp: fix typo in dp_display_handle_port_status_changed() (git-fixes).
- drm/nouveau/nvkm: add a replacement for nvkm_notify (bsc#1223834)
- drm/panel: ili9341: Respect deferred probe (git-fixes).
- drm/panel: ili9341: Use predefined error codes (git-fixes).
- drm/panel: visionox-rm69299: do not unregister DSI device (git-fixes).
- drm/vc4: do not check if plane->state->fb == state->fb (stable-fixes).
- drm/vmwgfx: Enable DMA mappings with SEV (git-fixes).
- drm/vmwgfx: Fix crtc's atomic check conditional (git-fixes).
- drm/vmwgfx: Fix invalid reads in fence signaled events (git-fixes).
- drm/vmwgfx: Sort primary plane formats by order of preference (git-fixes).
- drm: nv04: Fix out of bounds access (git-fixes).
- drm: panel-orientation-quirks: Add quirk for GPD Win Mini (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go (stable-fixes).
- dump_stack: Do not get cpu_sync for panic CPU (bsc#1223574).
- fbdev: fix incorrect address computation in deferred IO (git-fixes).
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (stable-fixes).
- fbmon: prevent division by zero in fb_videomode_from_videomode() (stable-fixes).
- fuse: do not unhash root (bsc#1223951).
- fuse: fix root lookup with nonzero generation (bsc#1223950).
- hwmon: (amc6821) add of_match table (stable-fixes).
- i2c: pxa: hide unused icr_bits[] variable (git-fixes).
- i2c: smbus: fix NULL function pointer dereference (git-fixes).
- i40e: Fix VF MAC filter removal (git-fixes).
- idma64: Do not try to serve interrupts when device is powered off (git-fixes).
- iio: accel: mxc4005: Interrupt handling fixes (git-fixes).
- iio:imu: adis16475: Fix sync mode setting (git-fixes).
- init/main.c: Fix potential static_command_line memory overflow (git-fixes).
- ipv6/addrconf: fix a potential refcount underflow for idev (git-fixes).
- irqchip/gic-v3-its: Prevent double free on error (git-fixes).
- kprobes: Fix possible use-after-free issue on kprobe registration (git-fixes).
- livepatch: Fix missing newline character in klp_resolve_symbols() (bsc#1223539).
- media: cec: core: remove length check of Timer Status (stable-fixes).
- media: sta2x11: fix irq handler cast (stable-fixes).
- mei: me: add arrow lake point H DID (stable-fixes).
- mei: me: add arrow lake point S DID (stable-fixes).
- mei: me: disable RPL-S on SPS and IGN firmwares (git-fixes).
- mm/vmscan: make sure wakeup_kswapd with managed zone (bsc#1223473).
- mmc: sdhci-msm: pervent access to suspended controller (git-fixes).
- mtd: diskonchip: work around ubsan link failure (stable-fixes).
- net: bridge: vlan: fix memory leak in __allowed_ingress (git-fixes).
- net: fix a memleak when uncloning an skb dst and its metadata (git-fixes).
- net: fix skb leak in __skb_tstamp_tx() (git-fixes).
- net: ipv6: ensure we call ipv6_mc_down() at most once (git-fixes).
- net: mld: fix reference count leak in mld_{query | report}_work() (git-fixes).
- net: stream: purge sk_error_queue in sk_stream_kill_queues() (git-fixes).
- net: usb: ax88179_178a: avoid writing the mac address before first reading (git-fixes).
- net: usb: ax88179_178a: stop lying about skb->truesize (git-fixes).
- net: vlan: fix underflow for the real_dev refcnt (git-fixes).
- net: vmxnet3: Fix NULL pointer dereference in vmxnet3_rq_rx_complete() (bsc#1223360).
- netfilter: br_netfilter: Drop dst references before setting (git-fixes).
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() (git-fixes).
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (git-fixes).
- nfsd: use __fput_sync() to avoid delayed closing of files (bsc#1223380 bsc#1217408).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nouveau: fix function cast warning (git-fixes).
- nouveau: fix instmem race condition around ptr stores (git-fixes).
- phy: tegra: xusb: Add API to retrieve the port number of phy (stable-fixes).
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs (stable-fixes).
- platform/x86: intel-vbtn: Update tablet mode switch at end of probe (git-fixes).
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet (stable-fixes).
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/rtas: define pr_fmt and convert printk call sites (bsc#1223369 ltc#205888).
- powerpc/rtas: export rtas_error_rc() for reuse (bsc#1223369 ltc#205888).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
- printk: Add this_cpu_in_panic() (bsc#1223574).
- printk: Adjust mapping for 32bit seq macros (bsc#1223574).
- printk: Avoid non-panic CPUs writing to ringbuffer (bsc#1223574).
- printk: Disable passing console lock owner completely during panic() (bsc#1223574).
- printk: Drop console_sem during panic (bsc#1223574).
- printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic() (bsc#1223574).
- printk: Use prb_first_seq() as base for 32bit seq macros (bsc#1223574).
- printk: Wait for all reserved records with pr_flush() (bsc#1223574).
- printk: nbcon: Relocate 32bit seq macros (bsc#1223574).
- printk: ringbuffer: Clarify special lpos values (bsc#1223574).
- printk: ringbuffer: Cleanup reader terminology (bsc#1223574).
- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq() (bsc#1223574).
- printk: ringbuffer: Improve prb_next_seq() performance (bsc#1223574).
- printk: ringbuffer: Skip non-finalized records in panic (bsc#1223574).
- pstore/zone: Add a null pointer check to the psz_kmsg_read (stable-fixes).
- ring-buffer: Only update pages_touched when a new page is touched (git-fixes).
- ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment (git-fixes).
- s390/cio: Ensure the copied buf is NUL terminated (git-fixes bsc#1223875).
- s390/decompressor: fix misaligned symbol build error (git-fixes bsc#1223785).
- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223877).
- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223878).
- s390/qeth: Fix kernel panic after setting hsuid (git-fixes bsc#1223879).
- s390/scm: fix virtual vs physical address confusion (git-fixes bsc#1223784).
- s390/vdso: Add CFI for RA register to asm macro vdso_func (git-fixes bsc#1223876).
- s390/vdso: drop '-fPIC' from LDFLAGS (git-fixes bsc#1223598).
- s390/zcrypt: fix reference counting on zcrypt card objects (git-fixes bsc#1223595).
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (git-fixes).
- serial: core: Provide port lock wrappers (stable-fixes).
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (git-fixes).
- serial: mxs-auart: add spinlock around changing cts state (git-fixes).
- slimbus: qcom-ngd-ctrl: Add timeout for wait operation (git-fixes).
- speakup: Avoid crash on very long word (git-fixes).
- speakup: Fix 8bit characters from direct synth (git-fixes).
- spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs (git-fixes).
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp (git-fixes).
- thunderbolt: Avoid notify PM core about runtime PM resume (stable-fixes).
- thunderbolt: Fix wake configurations after device unplug (stable-fixes).
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (git-fixes).
- tracing: Show size of requested perf buffer (git-fixes).
- usb: Disable USB3 LPM at shutdown (stable-fixes).
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (git-fixes).
- usb: dwc2: host: Fix dereference issue in DDMA completion flow (git-fixes).
- usb: dwc3: core: Prevent phy suspend during init (Git-fixes).
- usb: gadget: composite: fix OS descriptors w_value logic (git-fixes).
- usb: gadget: f_fs: Fix a race condition when processing setup packets (git-fixes).
- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (stable-fixes).
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (git-fixes).
- usb: ohci: Prevent missed ohci interrupts (git-fixes).
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (stable-fixes).
- usb: typec: tcpci: add generic tcpci fallback compatible (stable-fixes).
- usb: typec: tcpm: Check for port partner validity before consuming it (git-fixes).
- usb: typec: tcpm: unregister existing source caps before re-registration (bsc#1220569).
- usb: typec: ucsi: Ack unsupported commands (stable-fixes).
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset (stable-fixes).
- usb: typec: ucsi: Fix connector check on init (git-fixes).
- usb: udc: remove warning when queue disabled ep (stable-fixes).
- virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (bsc#1223949).
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (stable-fixes).
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one (git-fixes).
- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (git-fixes).
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (stable-fixes).
- wifi: nl80211: do not free NULL coalescing rule (git-fixes).
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).
- x86/bugs: Fix BHI documentation (git-fixes).
- x86/bugs: Fix BHI handling of RRSBA (git-fixes).
- x86/bugs: Fix BHI retpoline check (git-fixes).
- x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (git-fixes).
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (git-fixes).
- x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (jsc#PED-7167 git-fixes).
- x86/sev: Skip ROM range scans and validation for SEV-SNP guests (jsc#PED-7167 git-fixes).
- xfrm6: fix inet6_dev refcount underflow problem (git-fixes).
Patchnames
SUSE-2024-1644,SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1644,openSUSE-SLE-15.5-2024-1644
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for the Linux Kernel", "title": "Title of the patch" }, { "category": "description", "text": "\nThe SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).\n- CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).\n- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).\n- CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).\n- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).\n- CVE-2024-27042: Fixed drm/amdgpu for potential out-of-bounds access in amdgpu_discovery_reg_base_init() (bsc#1223823).\n- CVE-2024-27041: Fixed drm/amd/display NULL checks for adev-\u003edm.dc in amdgpu_dm_fini() (bsc#1223714).\n- CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).\n- CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).\n- CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).\n- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).\n- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).\n- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).\n- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).\n- CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).\n- CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).\n- CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).\n- CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).\n- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).\n- CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).\n- CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).\n- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).\n- CVE-2024-26939: Fixed drm/i915/vma UAF on destroy against retire race (bsc#1223679).\n- CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).\n- CVE-2024-26915: Fixed drm/amdgpu reset IH OVERFLOW_CLEAR bit (bsc#1223207).\n- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).\n- CVE-2024-26898: Fixed aoe potential use-after-free problem in aoecmd_cfg_pkts (bsc#1223016).\n- CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).\n- CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).\n- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).\n- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).\n- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).\n- CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).\n- CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).\n- CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).\n- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).\n- CVE-2024-26876: Fixed drm/bridge/adv7511 crash on irq during probe (bsc#1223119).\n- CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).\n- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).\n- CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).\n- CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).\n- CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).\n- CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).\n- CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).\n- CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).\n- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).\n- CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).\n- CVE-2024-26830: Fixed i40e to not allow untrusted VF to remove administratively set MAC (bsc#1223012).\n- CVE-2024-26817: Fixed amdkfd to use calloc instead of kzalloc to avoid integer overflow (bsc#1222812).\n- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).\n- CVE-2024-26791: Fixed btrfs/dev-replace properly validate device names (bsc#1222793).\n- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).\n- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).\n- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).\n- CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).\n- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).\n- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).\n- CVE-2024-26700: Fixed drm/amd/display MST Null pointer dereference for RV (bsc#1222870).\n- CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).\n- CVE-2024-26679: Fixed inet read sk-\u003esk_family once in inet_recv_error() (bsc#1222385).\n- CVE-2024-26675: Fixed ppp_async to limit MRU to 64K (bsc#1222379).\n- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).\n- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).\n- CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).\n- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).\n- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).\n- CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).\n- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).\n- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).\n- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).\n- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).\n- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).\n- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).\n- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).\n- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).\n- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).\n- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).\n- CVE-2023-52620: Fixed netfilter/nf_tables to disallow timeout for anonymous sets never used from userspace (bsc#1221825).\n- CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).\n- CVE-2023-52614: Fixed PM/devfreq buffer overflow in trans_stat_show (bsc#1221617).\n- CVE-2023-52593: Fixed wifi/wfx possible NULL pointer dereference in wfx_set_mfp_ap() (bsc#1221042).\n- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).\n- CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).\n- CVE-2023-52589: Fixed media/rkisp1 IRQ disable race issue (bsc#1221084).\n- CVE-2023-52585: Fixed drm/amdgpu for possible NULL pointer dereference in amdgpu_ras_query_error_status_helper() (bsc#1221080).\n- CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).\n- CVE-2022-48659: Fixed mm/slub to return errno if kmalloc() fails (bsc#1223498).\n- CVE-2022-48658: Fixed mm/slub to avoid a problem in flush_cpu_slab()/__free_slab() task context (bsc#1223496).\n- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-\u003emac_header (bsc#1223513).\n- CVE-2022-48642: Fixed netfilter/nf_tables percpu memory leak at nf_tables_addchain() (bsc#1223478).\n- CVE-2022-48640: Fixed bonding for possible NULL pointer dereference in bond_rr_gen_slave_id (bsc#1223499).\n- CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth \u003e 0 (bsc#1223475).\n- CVE-2021-47214: Fixed hugetlb/userfaultfd during restore reservation in hugetlb_mcopy_atomic_pte() (bsc#1222710).\n- CVE-2021-47211: Fixed a null pointer dereference on pointer cs_desc in usb-audio (bsc#1222869).\n- CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).\n- CVE-2021-47205: Unregistered clocks/resets when unbinding in sunxi-ng (bsc#1222888).\n- CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)\n- CVE-2021-47200: Fixed drm/prime for possible use-after-free in mmap within drm_gem_ttm_mmap() and drm_gem_ttm_mmap() (bsc#1222838).\n- CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).\n- CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).\n- CVE-2021-47184: Fixed NULL pointer dereference on VSI filter sync (bsc#1222666).\n\nThe following non-security bugs were fixed:\n\n- ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter (stable-fixes).\n- ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC (stable-fixes).\n- ALSA: hda/realtek - Fix inactive headset mic jack (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP SnowWhite laptops (stable-fixes).\n- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU (stable-fixes).\n- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (git-fixes).\n- ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support (stable-fixes).\n- ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support (stable-fixes).\n- ALSA: scarlett2: Add correct product series name to messages (stable-fixes).\n- ALSA: scarlett2: Add support for Clarett 8Pre USB (stable-fixes).\n- ALSA: scarlett2: Default mixer driver to enabled (stable-fixes).\n- ALSA: scarlett2: Move USB IDs out from device_info struct (stable-fixes).\n- ASoC: meson: axg-card: make links nonatomic (git-fixes).\n- ASoC: meson: axg-tdm-interface: manage formatters in trigger (git-fixes).\n- ASoC: meson: cards: select SND_DYNAMIC_MINORS (git-fixes).\n- ASoC: soc-core.c: Skip dummy codec when adding platforms (stable-fixes).\n- ASoC: tegra: Fix DSPK 16-bit playback (git-fixes).\n- ASoC: ti: davinci-mcasp: Fix race condition during probe (git-fixes).\n- Bluetooth: Add new quirk for broken read key length on ATS2851 (git-fixes).\n- Bluetooth: Fix TOCTOU in HCI debugfs implementation (git-fixes).\n- Bluetooth: Fix memory leak in hci_req_sync_complete() (git-fixes).\n- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (stable-fixes).\n- Bluetooth: L2CAP: Fix not validating setsockopt user input (git-fixes).\n- Bluetooth: RFCOMM: Fix not validating setsockopt user input (git-fixes).\n- Bluetooth: SCO: Fix not validating setsockopt user input (git-fixes).\n- Bluetooth: add quirk for broken address properties (git-fixes).\n- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (stable-fixes).\n- Bluetooth: btintel: Fixe build regression (git-fixes).\n- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (stable-fixes).\n- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (git-fixes).\n- Bluetooth: hci_event: set the conn encrypted before conn establishes (stable-fixes).\n- Bluetooth: hci_sock: Fix not validating setsockopt user input (git-fixes).\n- Bluetooth: qca: fix NULL-deref on non-serdev suspend (git-fixes).\n- Documentation: Add missing documentation for EXPORT_OP flags (stable-fixes).\n- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-\u003edevc (git-fixes).\n- HID: logitech-dj: allow mice to use all types of reports (git-fixes).\n- HID: uhid: Use READ_ONCE()/WRITE_ONCE() for -\u003erunning (stable-fixes).\n- Input: allocate keycode for Display refresh rate toggle (stable-fixes).\n- Input: synaptics-rmi4 - fail probing if memory allocation for \u0027phys\u0027 fails (stable-fixes).\n- NFC: trf7970a: disable all regulators on removal (git-fixes).\n- PCI: rpaphp: Error out on busy status from get-sensor-state (bsc#1223369 ltc#205888).\n- RDMA/cm: Print the old state when cm_destroy_id gets timeout (git-fixes).\n- Reapply \u0027drm/qxl: simplify qxl_fence_wait\u0027 (stable-fixes).\n- Revert \u0027ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default\u0027 (stable-fixes).\n- Revert \u0027drm/qxl: simplify qxl_fence_wait\u0027 (git-fixes).\n- Revert \u0027ice: Fix ice VF reset during iavf initialization (jsc#PED-376).\u0027 (bsc#1223275)\n- Revert \u0027usb: cdc-wdm: close race between read and workqueue\u0027 (git-fixes).\n- Revert \u0027usb: phy: generic: Get the vbus supply\u0027 (git-fixes).\n- USB: UAS: return ENODEV when submit urbs fail with device not attached (stable-fixes).\n- USB: core: Add hub_get() and hub_put() routines (git-fixes).\n- USB: core: Fix access violation during port device removal (git-fixes).\n- USB: core: Fix deadlock in port \u0027disable\u0027 sysfs attribute (git-fixes).\n- USB: serial: add device ID for VeriFone adapter (stable-fixes).\n- USB: serial: cp210x: add ID for MGP Instruments PDS100 (stable-fixes).\n- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (stable-fixes).\n- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (stable-fixes).\n- USB: serial: option: add Fibocom FM135-GL variants (stable-fixes).\n- USB: serial: option: add Lonsung U8300/U9300 product (stable-fixes).\n- USB: serial: option: add MeiG Smart SLM320 product (stable-fixes).\n- USB: serial: option: add Rolling RW101-GL and RW135-GL support (stable-fixes).\n- USB: serial: option: add Telit FN920C04 rmnet compositions (stable-fixes).\n- USB: serial: option: add support for Fibocom FM650/FG650 (stable-fixes).\n- USB: serial: option: support Quectel EM060K sub-models (stable-fixes).\n- nfsd: Fixed mount kerberized nfs4 share issue (git-fixes bsc#1223858).\n- s390: Fixed kernel backtrack (bsc#1141539 git-fixes).\n- nfsd: Fixed mount issue with KOTD (bsc#1223380 bsc#1217408 bsc#1223640).\n- s390: Fixed LPM of lpar failure with error HSCLA2CF in 19th loops (jsc#PED-542 git-fixes bsc#1213573 ltc#203238).\n- ahci: asm1064: asm1166: do not limit reported ports (git-fixes).\n- ahci: asm1064: correct count of reported ports (stable-fixes).\n- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (git-fixes)\n- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro (git-fixes)\n- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 (git-fixes)\n- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for (git-fixes)\n- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 (git-fixes)\n- arm64: dts: rockchip: fix rk3328 hdmi ports node (git-fixes)\n- arm64: dts: rockchip: fix rk3399 hdmi ports node (git-fixes)\n- arm64: hibernate: Fix level3 translation fault in swsusp_save() (git-fixes).\n- ax25: fix use-after-free bugs caused by ax25_ds_del_timer (git-fixes).\n- batman-adv: Avoid infinite loop trying to resize local TT (git-fixes).\n- clk: Get runtime PM before walking tree during disable_unused (git-fixes).\n- clk: Initialize struct clk_core kref earlier (stable-fixes).\n- clk: Mark \u0027all_lists\u0027 as const (stable-fixes).\n- clk: Print an info line before disabling unused clocks (stable-fixes).\n- clk: Remove prepare_lock hold assertion in __clk_release() (git-fixes).\n- clk: remove extra empty line (stable-fixes).\n- comedi: vmk80xx: fix incomplete endpoint checking (git-fixes).\n- dma: xilinx_dpdma: Fix locking (git-fixes).\n- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (git-fixes).\n- dmaengine: owl: fix register access functions (git-fixes).\n- dmaengine: tegra186: Fix residual calculation (git-fixes).\n- docs: Document the FAN_FS_ERROR event (stable-fixes).\n- drm-print: add drm_dbg_driver to improve namespace symmetry (stable-fixes).\n- drm/amd/display: Do not recursively call manual trigger programming (stable-fixes).\n- drm/amd/display: Fix nanosec stat overflow (stable-fixes).\n- drm/amd/display: fix disable otg wa logic in DCN316 (stable-fixes).\n- drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 (stable-fixes).\n- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 (stable-fixes).\n- drm/amdgpu: Fix leak when GPU memory allocation fails (stable-fixes).\n- drm/amdgpu: Reset dGPU if suspend got aborted (stable-fixes).\n- drm/amdgpu: always force full reset for SOC21 (stable-fixes).\n- drm/amdgpu: fix incorrect active rb bitmap for gfx11 (stable-fixes).\n- drm/amdgpu: fix incorrect number of active RBs for gfx11 (stable-fixes).\n- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (git-fixes).\n- drm/amdgpu: validate the parameters of bo mapping operations more clearly (git-fixes).\n- drm/amdkfd: Reset GPU on queue preemption failure (stable-fixes).\n- drm/ast: Fix soft lockup (git-fixes).\n- drm/client: Fully protect modes[] with dev-\u003emode_config.mutex (stable-fixes).\n- drm/i915/cdclk: Fix CDCLK programming order when pipes are active (git-fixes).\n- drm/i915/vrr: Disable VRR when using bigjoiner (stable-fixes).\n- drm/i915: Disable port sync when bigjoiner is used (stable-fixes).\n- drm/msm/dp: fix typo in dp_display_handle_port_status_changed() (git-fixes).\n- drm/nouveau/nvkm: add a replacement for nvkm_notify (bsc#1223834)\n- drm/panel: ili9341: Respect deferred probe (git-fixes).\n- drm/panel: ili9341: Use predefined error codes (git-fixes).\n- drm/panel: visionox-rm69299: do not unregister DSI device (git-fixes).\n- drm/vc4: do not check if plane-\u003estate-\u003efb == state-\u003efb (stable-fixes).\n- drm/vmwgfx: Enable DMA mappings with SEV (git-fixes).\n- drm/vmwgfx: Fix crtc\u0027s atomic check conditional (git-fixes).\n- drm/vmwgfx: Fix invalid reads in fence signaled events (git-fixes).\n- drm/vmwgfx: Sort primary plane formats by order of preference (git-fixes).\n- drm: nv04: Fix out of bounds access (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for GPD Win Mini (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go (stable-fixes).\n- dump_stack: Do not get cpu_sync for panic CPU (bsc#1223574).\n- fbdev: fix incorrect address computation in deferred IO (git-fixes).\n- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (stable-fixes).\n- fbmon: prevent division by zero in fb_videomode_from_videomode() (stable-fixes).\n- fuse: do not unhash root (bsc#1223951).\n- fuse: fix root lookup with nonzero generation (bsc#1223950).\n- hwmon: (amc6821) add of_match table (stable-fixes).\n- i2c: pxa: hide unused icr_bits[] variable (git-fixes).\n- i2c: smbus: fix NULL function pointer dereference (git-fixes).\n- i40e: Fix VF MAC filter removal (git-fixes).\n- idma64: Do not try to serve interrupts when device is powered off (git-fixes).\n- iio: accel: mxc4005: Interrupt handling fixes (git-fixes).\n- iio:imu: adis16475: Fix sync mode setting (git-fixes).\n- init/main.c: Fix potential static_command_line memory overflow (git-fixes).\n- ipv6/addrconf: fix a potential refcount underflow for idev (git-fixes).\n- irqchip/gic-v3-its: Prevent double free on error (git-fixes).\n- kprobes: Fix possible use-after-free issue on kprobe registration (git-fixes).\n- livepatch: Fix missing newline character in klp_resolve_symbols() (bsc#1223539).\n- media: cec: core: remove length check of Timer Status (stable-fixes).\n- media: sta2x11: fix irq handler cast (stable-fixes).\n- mei: me: add arrow lake point H DID (stable-fixes).\n- mei: me: add arrow lake point S DID (stable-fixes).\n- mei: me: disable RPL-S on SPS and IGN firmwares (git-fixes).\n- mm/vmscan: make sure wakeup_kswapd with managed zone (bsc#1223473).\n- mmc: sdhci-msm: pervent access to suspended controller (git-fixes).\n- mtd: diskonchip: work around ubsan link failure (stable-fixes).\n- net: bridge: vlan: fix memory leak in __allowed_ingress (git-fixes).\n- net: fix a memleak when uncloning an skb dst and its metadata (git-fixes).\n- net: fix skb leak in __skb_tstamp_tx() (git-fixes).\n- net: ipv6: ensure we call ipv6_mc_down() at most once (git-fixes).\n- net: mld: fix reference count leak in mld_{query | report}_work() (git-fixes).\n- net: stream: purge sk_error_queue in sk_stream_kill_queues() (git-fixes).\n- net: usb: ax88179_178a: avoid writing the mac address before first reading (git-fixes).\n- net: usb: ax88179_178a: stop lying about skb-\u003etruesize (git-fixes).\n- net: vlan: fix underflow for the real_dev refcnt (git-fixes).\n- net: vmxnet3: Fix NULL pointer dereference in vmxnet3_rq_rx_complete() (bsc#1223360).\n- netfilter: br_netfilter: Drop dst references before setting (git-fixes).\n- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() (git-fixes).\n- netfilter: nft_ct: fix l3num expectations with inet pseudo family (git-fixes).\n- nfsd: use __fput_sync() to avoid delayed closing of files (bsc#1223380 bsc#1217408).\n- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).\n- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).\n- nouveau: fix function cast warning (git-fixes).\n- nouveau: fix instmem race condition around ptr stores (git-fixes).\n- phy: tegra: xusb: Add API to retrieve the port number of phy (stable-fixes).\n- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs (stable-fixes).\n- platform/x86: intel-vbtn: Update tablet mode switch at end of probe (git-fixes).\n- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet (stable-fixes).\n- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).\n- powerpc/rtas: define pr_fmt and convert printk call sites (bsc#1223369 ltc#205888).\n- powerpc/rtas: export rtas_error_rc() for reuse (bsc#1223369 ltc#205888).\n- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).\n- powerpc: Refactor verification of MSR_RI (bsc#1223191).\n- printk: Add this_cpu_in_panic() (bsc#1223574).\n- printk: Adjust mapping for 32bit seq macros (bsc#1223574).\n- printk: Avoid non-panic CPUs writing to ringbuffer (bsc#1223574).\n- printk: Disable passing console lock owner completely during panic() (bsc#1223574).\n- printk: Drop console_sem during panic (bsc#1223574).\n- printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic() (bsc#1223574).\n- printk: Use prb_first_seq() as base for 32bit seq macros (bsc#1223574).\n- printk: Wait for all reserved records with pr_flush() (bsc#1223574).\n- printk: nbcon: Relocate 32bit seq macros (bsc#1223574).\n- printk: ringbuffer: Clarify special lpos values (bsc#1223574).\n- printk: ringbuffer: Cleanup reader terminology (bsc#1223574).\n- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq() (bsc#1223574).\n- printk: ringbuffer: Improve prb_next_seq() performance (bsc#1223574).\n- printk: ringbuffer: Skip non-finalized records in panic (bsc#1223574).\n- pstore/zone: Add a null pointer check to the psz_kmsg_read (stable-fixes).\n- ring-buffer: Only update pages_touched when a new page is touched (git-fixes).\n- ring-buffer: use READ_ONCE() to read cpu_buffer-\u003ecommit_page in concurrent environment (git-fixes).\n- s390/cio: Ensure the copied buf is NUL terminated (git-fixes bsc#1223875).\n- s390/decompressor: fix misaligned symbol build error (git-fixes bsc#1223785).\n- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223877).\n- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223878).\n- s390/qeth: Fix kernel panic after setting hsuid (git-fixes bsc#1223879).\n- s390/scm: fix virtual vs physical address confusion (git-fixes bsc#1223784).\n- s390/vdso: Add CFI for RA register to asm macro vdso_func (git-fixes bsc#1223876).\n- s390/vdso: drop \u0027-fPIC\u0027 from LDFLAGS (git-fixes bsc#1223598).\n- s390/zcrypt: fix reference counting on zcrypt card objects (git-fixes bsc#1223595).\n- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (git-fixes).\n- serial: core: Provide port lock wrappers (stable-fixes).\n- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (git-fixes).\n- serial: mxs-auart: add spinlock around changing cts state (git-fixes).\n- slimbus: qcom-ngd-ctrl: Add timeout for wait operation (git-fixes).\n- speakup: Avoid crash on very long word (git-fixes).\n- speakup: Fix 8bit characters from direct synth (git-fixes).\n- spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs (git-fixes).\n- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp (git-fixes).\n- thunderbolt: Avoid notify PM core about runtime PM resume (stable-fixes).\n- thunderbolt: Fix wake configurations after device unplug (stable-fixes).\n- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (git-fixes).\n- tracing: Show size of requested perf buffer (git-fixes).\n- usb: Disable USB3 LPM at shutdown (stable-fixes).\n- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (git-fixes).\n- usb: dwc2: host: Fix dereference issue in DDMA completion flow (git-fixes).\n- usb: dwc3: core: Prevent phy suspend during init (Git-fixes).\n- usb: gadget: composite: fix OS descriptors w_value logic (git-fixes).\n- usb: gadget: f_fs: Fix a race condition when processing setup packets (git-fixes).\n- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (stable-fixes).\n- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (git-fixes).\n- usb: ohci: Prevent missed ohci interrupts (git-fixes).\n- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (stable-fixes).\n- usb: typec: tcpci: add generic tcpci fallback compatible (stable-fixes).\n- usb: typec: tcpm: Check for port partner validity before consuming it (git-fixes).\n- usb: typec: tcpm: unregister existing source caps before re-registration (bsc#1220569).\n- usb: typec: ucsi: Ack unsupported commands (stable-fixes).\n- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset (stable-fixes).\n- usb: typec: ucsi: Fix connector check on init (git-fixes).\n- usb: udc: remove warning when queue disabled ep (stable-fixes).\n- virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (bsc#1223949).\n- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (stable-fixes).\n- wifi: iwlwifi: mvm: remove old PASN station when adding a new one (git-fixes).\n- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (git-fixes).\n- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (stable-fixes).\n- wifi: nl80211: do not free NULL coalescing rule (git-fixes).\n- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).\n- x86/bugs: Fix BHI documentation (git-fixes).\n- x86/bugs: Fix BHI handling of RRSBA (git-fixes).\n- x86/bugs: Fix BHI retpoline check (git-fixes).\n- x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).\n- x86/bugs: Rename various \u0027ia32_cap\u0027 variables to \u0027x86_arch_cap_msr\u0027 (git-fixes).\n- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (git-fixes).\n- x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (jsc#PED-7167 git-fixes).\n- x86/sev: Skip ROM range scans and validation for SEV-SNP guests (jsc#PED-7167 git-fixes).\n- xfrm6: fix inet6_dev refcount underflow problem (git-fixes).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-1644,SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1644,openSUSE-SLE-15.5-2024-1644", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1644-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:1644-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241644-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:1644-1", "url": "https://lists.suse.com/pipermail/sle-updates/2024-May/035263.html" }, { "category": "self", "summary": "SUSE Bug 1141539", "url": "https://bugzilla.suse.com/1141539" }, { "category": "self", "summary": "SUSE Bug 1190576", "url": "https://bugzilla.suse.com/1190576" }, { "category": "self", "summary": "SUSE Bug 1192145", "url": "https://bugzilla.suse.com/1192145" }, { "category": "self", "summary": "SUSE Bug 1192837", "url": "https://bugzilla.suse.com/1192837" }, { "category": "self", "summary": "SUSE Bug 1193629", "url": "https://bugzilla.suse.com/1193629" }, { "category": "self", "summary": "SUSE Bug 1196869", "url": "https://bugzilla.suse.com/1196869" }, { "category": "self", "summary": "SUSE Bug 1200313", "url": "https://bugzilla.suse.com/1200313" }, { "category": "self", "summary": "SUSE Bug 1201308", "url": "https://bugzilla.suse.com/1201308" }, { "category": "self", "summary": "SUSE Bug 1201489", "url": "https://bugzilla.suse.com/1201489" }, { "category": "self", "summary": "SUSE Bug 1203906", "url": "https://bugzilla.suse.com/1203906" }, { "category": "self", "summary": "SUSE Bug 1203935", "url": "https://bugzilla.suse.com/1203935" }, { "category": "self", "summary": "SUSE Bug 1204614", "url": "https://bugzilla.suse.com/1204614" }, { "category": "self", "summary": "SUSE Bug 1207361", "url": "https://bugzilla.suse.com/1207361" }, { "category": "self", "summary": "SUSE Bug 1211592", "url": "https://bugzilla.suse.com/1211592" }, { "category": "self", "summary": "SUSE Bug 1213573", "url": "https://bugzilla.suse.com/1213573" }, { "category": "self", "summary": "SUSE Bug 1217339", "url": "https://bugzilla.suse.com/1217339" }, { "category": "self", "summary": "SUSE Bug 1217408", "url": "https://bugzilla.suse.com/1217408" }, { "category": "self", "summary": "SUSE Bug 1218562", "url": "https://bugzilla.suse.com/1218562" }, { "category": "self", "summary": "SUSE Bug 1218917", "url": "https://bugzilla.suse.com/1218917" }, { "category": "self", "summary": "SUSE Bug 1219104", "url": "https://bugzilla.suse.com/1219104" }, { "category": "self", "summary": "SUSE Bug 1219126", "url": "https://bugzilla.suse.com/1219126" }, { "category": "self", "summary": "SUSE Bug 1219141", "url": "https://bugzilla.suse.com/1219141" }, { "category": "self", "summary": "SUSE Bug 1219169", "url": "https://bugzilla.suse.com/1219169" }, { "category": "self", "summary": "SUSE Bug 1219170", "url": "https://bugzilla.suse.com/1219170" }, { "category": "self", "summary": "SUSE Bug 1219264", "url": "https://bugzilla.suse.com/1219264" }, { "category": "self", "summary": "SUSE Bug 1220342", "url": "https://bugzilla.suse.com/1220342" }, { "category": "self", "summary": "SUSE Bug 1220569", "url": "https://bugzilla.suse.com/1220569" }, { "category": "self", "summary": "SUSE Bug 1220761", "url": "https://bugzilla.suse.com/1220761" }, { "category": "self", "summary": "SUSE Bug 1221042", "url": "https://bugzilla.suse.com/1221042" }, { "category": "self", "summary": "SUSE Bug 1221044", "url": "https://bugzilla.suse.com/1221044" }, { "category": "self", "summary": "SUSE Bug 1221080", "url": "https://bugzilla.suse.com/1221080" }, { "category": "self", "summary": "SUSE Bug 1221084", "url": "https://bugzilla.suse.com/1221084" }, { "category": "self", "summary": "SUSE Bug 1221088", "url": "https://bugzilla.suse.com/1221088" }, { "category": "self", "summary": "SUSE Bug 1221299", "url": "https://bugzilla.suse.com/1221299" }, { "category": "self", "summary": "SUSE Bug 1221612", "url": "https://bugzilla.suse.com/1221612" }, { "category": "self", "summary": "SUSE Bug 1221617", "url": "https://bugzilla.suse.com/1221617" }, { "category": "self", "summary": "SUSE Bug 1221645", "url": "https://bugzilla.suse.com/1221645" }, { "category": "self", "summary": "SUSE Bug 1221825", "url": "https://bugzilla.suse.com/1221825" }, { "category": "self", "summary": "SUSE Bug 1222294", "url": "https://bugzilla.suse.com/1222294" }, { "category": "self", "summary": "SUSE Bug 1222307", "url": "https://bugzilla.suse.com/1222307" }, { "category": "self", "summary": "SUSE Bug 1222357", "url": "https://bugzilla.suse.com/1222357" }, { "category": "self", "summary": "SUSE Bug 1222368", "url": "https://bugzilla.suse.com/1222368" }, { "category": "self", "summary": "SUSE Bug 1222379", "url": "https://bugzilla.suse.com/1222379" }, { "category": "self", "summary": "SUSE Bug 1222385", "url": "https://bugzilla.suse.com/1222385" }, { "category": "self", "summary": "SUSE Bug 1222424", "url": "https://bugzilla.suse.com/1222424" }, { "category": "self", "summary": "SUSE Bug 1222430", "url": "https://bugzilla.suse.com/1222430" }, { "category": "self", "summary": "SUSE Bug 1222435", "url": "https://bugzilla.suse.com/1222435" }, { "category": "self", "summary": "SUSE Bug 1222482", "url": "https://bugzilla.suse.com/1222482" }, { "category": "self", "summary": "SUSE Bug 1222559", "url": "https://bugzilla.suse.com/1222559" }, { "category": "self", "summary": "SUSE Bug 1222585", "url": "https://bugzilla.suse.com/1222585" }, { "category": "self", "summary": "SUSE Bug 1222613", "url": "https://bugzilla.suse.com/1222613" }, { "category": "self", "summary": "SUSE Bug 1222615", "url": "https://bugzilla.suse.com/1222615" }, { "category": "self", "summary": "SUSE Bug 1222618", "url": "https://bugzilla.suse.com/1222618" }, { "category": "self", "summary": "SUSE Bug 1222624", "url": "https://bugzilla.suse.com/1222624" }, { "category": "self", "summary": "SUSE Bug 1222666", "url": "https://bugzilla.suse.com/1222666" }, { "category": "self", "summary": "SUSE Bug 1222669", "url": "https://bugzilla.suse.com/1222669" }, { "category": "self", "summary": "SUSE Bug 1222671", "url": "https://bugzilla.suse.com/1222671" }, { "category": "self", "summary": "SUSE Bug 1222703", "url": "https://bugzilla.suse.com/1222703" }, { "category": "self", "summary": "SUSE Bug 1222704", "url": "https://bugzilla.suse.com/1222704" }, { "category": "self", "summary": "SUSE Bug 1222709", "url": "https://bugzilla.suse.com/1222709" }, { "category": "self", "summary": "SUSE Bug 1222710", "url": "https://bugzilla.suse.com/1222710" }, { "category": "self", "summary": "SUSE Bug 1222721", "url": "https://bugzilla.suse.com/1222721" }, { "category": "self", "summary": "SUSE Bug 1222726", "url": "https://bugzilla.suse.com/1222726" }, { "category": "self", "summary": "SUSE Bug 1222773", "url": "https://bugzilla.suse.com/1222773" }, { "category": "self", "summary": "SUSE Bug 1222776", "url": "https://bugzilla.suse.com/1222776" }, { "category": "self", "summary": "SUSE Bug 1222785", "url": "https://bugzilla.suse.com/1222785" }, { "category": "self", "summary": "SUSE Bug 1222787", "url": "https://bugzilla.suse.com/1222787" }, { "category": "self", "summary": "SUSE Bug 1222790", "url": "https://bugzilla.suse.com/1222790" }, { "category": "self", "summary": "SUSE Bug 1222791", "url": "https://bugzilla.suse.com/1222791" }, { "category": "self", "summary": "SUSE Bug 1222792", "url": "https://bugzilla.suse.com/1222792" }, { "category": "self", "summary": "SUSE Bug 1222793", "url": "https://bugzilla.suse.com/1222793" }, { "category": "self", "summary": "SUSE Bug 1222796", "url": "https://bugzilla.suse.com/1222796" }, { "category": "self", "summary": "SUSE Bug 1222812", "url": "https://bugzilla.suse.com/1222812" }, { "category": "self", "summary": "SUSE Bug 1222824", "url": "https://bugzilla.suse.com/1222824" }, { "category": "self", "summary": "SUSE Bug 1222829", "url": "https://bugzilla.suse.com/1222829" }, { "category": "self", "summary": "SUSE Bug 1222832", "url": "https://bugzilla.suse.com/1222832" }, { "category": "self", "summary": "SUSE Bug 1222836", "url": "https://bugzilla.suse.com/1222836" }, { "category": "self", "summary": "SUSE Bug 1222838", "url": "https://bugzilla.suse.com/1222838" }, { "category": "self", "summary": "SUSE Bug 1222866", "url": "https://bugzilla.suse.com/1222866" }, { "category": "self", "summary": "SUSE Bug 1222867", "url": "https://bugzilla.suse.com/1222867" }, { "category": "self", "summary": "SUSE Bug 1222869", "url": "https://bugzilla.suse.com/1222869" }, { "category": "self", "summary": "SUSE Bug 1222870", "url": "https://bugzilla.suse.com/1222870" }, { "category": "self", "summary": "SUSE Bug 1222876", "url": "https://bugzilla.suse.com/1222876" }, { "category": "self", "summary": "SUSE Bug 1222878", "url": "https://bugzilla.suse.com/1222878" }, { "category": "self", "summary": "SUSE Bug 1222879", "url": "https://bugzilla.suse.com/1222879" }, { "category": "self", "summary": "SUSE Bug 1222881", "url": "https://bugzilla.suse.com/1222881" }, { "category": "self", "summary": "SUSE Bug 1222883", "url": "https://bugzilla.suse.com/1222883" }, { "category": "self", "summary": "SUSE Bug 1222888", "url": "https://bugzilla.suse.com/1222888" }, { "category": "self", "summary": "SUSE Bug 1222894", "url": "https://bugzilla.suse.com/1222894" }, { "category": "self", "summary": "SUSE Bug 1222901", "url": "https://bugzilla.suse.com/1222901" }, { "category": "self", "summary": "SUSE Bug 1222968", "url": "https://bugzilla.suse.com/1222968" }, { "category": "self", "summary": "SUSE Bug 1222976", "url": "https://bugzilla.suse.com/1222976" }, { "category": "self", "summary": "SUSE Bug 1223012", "url": "https://bugzilla.suse.com/1223012" }, { "category": "self", "summary": "SUSE Bug 1223014", "url": "https://bugzilla.suse.com/1223014" }, { "category": "self", "summary": "SUSE Bug 1223016", "url": "https://bugzilla.suse.com/1223016" }, { "category": "self", "summary": "SUSE Bug 1223024", "url": "https://bugzilla.suse.com/1223024" }, { "category": "self", "summary": "SUSE Bug 1223033", "url": "https://bugzilla.suse.com/1223033" }, { "category": "self", "summary": "SUSE Bug 1223034", "url": "https://bugzilla.suse.com/1223034" }, { "category": "self", "summary": "SUSE Bug 1223035", "url": "https://bugzilla.suse.com/1223035" }, { "category": "self", "summary": "SUSE Bug 1223036", "url": "https://bugzilla.suse.com/1223036" }, { "category": "self", "summary": "SUSE Bug 1223037", "url": "https://bugzilla.suse.com/1223037" }, { "category": "self", "summary": "SUSE Bug 1223041", "url": "https://bugzilla.suse.com/1223041" }, { "category": "self", "summary": "SUSE Bug 1223042", "url": "https://bugzilla.suse.com/1223042" }, { "category": "self", "summary": "SUSE Bug 1223051", "url": "https://bugzilla.suse.com/1223051" }, { "category": "self", "summary": "SUSE Bug 1223052", "url": "https://bugzilla.suse.com/1223052" }, { "category": "self", "summary": "SUSE Bug 1223056", "url": "https://bugzilla.suse.com/1223056" }, { "category": "self", "summary": "SUSE Bug 1223057", "url": "https://bugzilla.suse.com/1223057" }, { "category": "self", "summary": "SUSE Bug 1223058", "url": "https://bugzilla.suse.com/1223058" }, { "category": "self", "summary": "SUSE Bug 1223060", "url": "https://bugzilla.suse.com/1223060" }, { "category": "self", "summary": "SUSE Bug 1223061", "url": "https://bugzilla.suse.com/1223061" }, { "category": "self", "summary": "SUSE Bug 1223065", "url": "https://bugzilla.suse.com/1223065" }, { "category": "self", "summary": "SUSE Bug 1223066", "url": "https://bugzilla.suse.com/1223066" }, { "category": "self", "summary": "SUSE Bug 1223076", "url": "https://bugzilla.suse.com/1223076" }, { "category": "self", "summary": "SUSE Bug 1223078", "url": "https://bugzilla.suse.com/1223078" }, { "category": "self", "summary": "SUSE Bug 1223111", "url": "https://bugzilla.suse.com/1223111" }, { "category": "self", "summary": "SUSE Bug 1223115", "url": "https://bugzilla.suse.com/1223115" }, { "category": "self", "summary": "SUSE Bug 1223118", "url": "https://bugzilla.suse.com/1223118" }, { "category": "self", "summary": "SUSE Bug 1223119", "url": "https://bugzilla.suse.com/1223119" }, { "category": "self", "summary": "SUSE Bug 1223140", "url": "https://bugzilla.suse.com/1223140" }, { "category": "self", "summary": "SUSE Bug 1223187", "url": "https://bugzilla.suse.com/1223187" }, { "category": "self", "summary": "SUSE Bug 1223189", "url": "https://bugzilla.suse.com/1223189" }, { "category": "self", "summary": "SUSE Bug 1223190", "url": "https://bugzilla.suse.com/1223190" }, { "category": "self", "summary": "SUSE Bug 1223191", "url": "https://bugzilla.suse.com/1223191" }, { "category": "self", "summary": "SUSE Bug 1223196", "url": "https://bugzilla.suse.com/1223196" }, { "category": "self", "summary": "SUSE Bug 1223197", "url": "https://bugzilla.suse.com/1223197" }, { "category": "self", "summary": "SUSE Bug 1223198", "url": "https://bugzilla.suse.com/1223198" }, { "category": "self", "summary": "SUSE Bug 1223207", "url": "https://bugzilla.suse.com/1223207" }, { "category": "self", "summary": "SUSE Bug 1223275", "url": "https://bugzilla.suse.com/1223275" }, { "category": "self", "summary": "SUSE Bug 1223323", "url": "https://bugzilla.suse.com/1223323" }, { "category": "self", "summary": "SUSE Bug 1223360", "url": "https://bugzilla.suse.com/1223360" }, { "category": "self", "summary": "SUSE Bug 1223369", "url": "https://bugzilla.suse.com/1223369" }, { "category": "self", "summary": "SUSE Bug 1223380", "url": "https://bugzilla.suse.com/1223380" }, { "category": "self", "summary": "SUSE Bug 1223432", "url": "https://bugzilla.suse.com/1223432" }, { "category": "self", "summary": "SUSE Bug 1223473", "url": "https://bugzilla.suse.com/1223473" }, { "category": "self", "summary": "SUSE Bug 1223474", "url": "https://bugzilla.suse.com/1223474" }, { "category": "self", "summary": "SUSE Bug 1223475", "url": "https://bugzilla.suse.com/1223475" }, { "category": "self", "summary": "SUSE Bug 1223477", "url": "https://bugzilla.suse.com/1223477" }, { "category": "self", "summary": "SUSE Bug 1223478", "url": "https://bugzilla.suse.com/1223478" }, { "category": "self", "summary": "SUSE Bug 1223479", "url": "https://bugzilla.suse.com/1223479" }, { "category": "self", "summary": "SUSE Bug 1223481", "url": "https://bugzilla.suse.com/1223481" }, { "category": "self", "summary": "SUSE Bug 1223482", "url": "https://bugzilla.suse.com/1223482" }, { "category": "self", "summary": "SUSE Bug 1223484", "url": "https://bugzilla.suse.com/1223484" }, { "category": "self", "summary": "SUSE Bug 1223487", "url": "https://bugzilla.suse.com/1223487" }, { "category": "self", "summary": "SUSE Bug 1223490", "url": "https://bugzilla.suse.com/1223490" }, { "category": "self", "summary": "SUSE Bug 1223496", "url": "https://bugzilla.suse.com/1223496" }, { "category": "self", "summary": "SUSE Bug 1223498", "url": "https://bugzilla.suse.com/1223498" }, { "category": "self", "summary": "SUSE Bug 1223499", "url": "https://bugzilla.suse.com/1223499" }, { "category": "self", "summary": "SUSE Bug 1223501", "url": "https://bugzilla.suse.com/1223501" }, { "category": "self", "summary": "SUSE Bug 1223502", "url": "https://bugzilla.suse.com/1223502" }, { "category": "self", "summary": "SUSE Bug 1223503", "url": "https://bugzilla.suse.com/1223503" }, { "category": "self", "summary": "SUSE Bug 1223505", "url": "https://bugzilla.suse.com/1223505" }, { "category": "self", "summary": "SUSE Bug 1223509", "url": "https://bugzilla.suse.com/1223509" }, { "category": "self", "summary": "SUSE Bug 1223511", "url": "https://bugzilla.suse.com/1223511" }, { "category": "self", "summary": "SUSE Bug 1223512", "url": "https://bugzilla.suse.com/1223512" }, { "category": "self", "summary": "SUSE Bug 1223513", "url": "https://bugzilla.suse.com/1223513" }, { "category": "self", "summary": "SUSE Bug 1223516", "url": "https://bugzilla.suse.com/1223516" }, { "category": "self", "summary": "SUSE Bug 1223517", "url": "https://bugzilla.suse.com/1223517" }, { "category": "self", "summary": "SUSE Bug 1223518", "url": "https://bugzilla.suse.com/1223518" }, { "category": "self", "summary": "SUSE Bug 1223519", "url": "https://bugzilla.suse.com/1223519" }, { "category": "self", "summary": "SUSE Bug 1223520", "url": "https://bugzilla.suse.com/1223520" }, { "category": "self", "summary": "SUSE Bug 1223522", "url": "https://bugzilla.suse.com/1223522" }, { "category": "self", "summary": "SUSE Bug 1223523", "url": "https://bugzilla.suse.com/1223523" }, { "category": "self", "summary": "SUSE Bug 1223525", "url": "https://bugzilla.suse.com/1223525" }, { "category": "self", "summary": "SUSE Bug 1223536", "url": "https://bugzilla.suse.com/1223536" }, { "category": "self", "summary": "SUSE Bug 1223539", "url": "https://bugzilla.suse.com/1223539" }, { "category": "self", "summary": "SUSE Bug 1223574", "url": "https://bugzilla.suse.com/1223574" }, { "category": "self", "summary": "SUSE Bug 1223595", "url": "https://bugzilla.suse.com/1223595" }, { "category": "self", "summary": "SUSE Bug 1223598", "url": "https://bugzilla.suse.com/1223598" }, { "category": "self", "summary": "SUSE Bug 1223628", "url": "https://bugzilla.suse.com/1223628" }, { "category": "self", "summary": "SUSE Bug 1223634", "url": "https://bugzilla.suse.com/1223634" }, { "category": "self", "summary": "SUSE Bug 1223640", "url": "https://bugzilla.suse.com/1223640" }, { "category": "self", "summary": "SUSE Bug 1223643", "url": "https://bugzilla.suse.com/1223643" }, { "category": "self", "summary": "SUSE Bug 1223644", "url": "https://bugzilla.suse.com/1223644" }, { "category": "self", "summary": "SUSE Bug 1223645", "url": "https://bugzilla.suse.com/1223645" }, { "category": "self", "summary": "SUSE Bug 1223646", "url": "https://bugzilla.suse.com/1223646" }, { "category": "self", "summary": "SUSE Bug 1223648", "url": "https://bugzilla.suse.com/1223648" }, { "category": "self", "summary": "SUSE Bug 1223655", "url": "https://bugzilla.suse.com/1223655" }, { "category": "self", "summary": "SUSE Bug 1223657", "url": "https://bugzilla.suse.com/1223657" }, { "category": "self", "summary": "SUSE Bug 1223660", "url": "https://bugzilla.suse.com/1223660" }, { "category": "self", "summary": "SUSE Bug 1223661", "url": "https://bugzilla.suse.com/1223661" }, { "category": "self", "summary": "SUSE Bug 1223663", "url": "https://bugzilla.suse.com/1223663" }, { "category": "self", "summary": "SUSE Bug 1223664", "url": "https://bugzilla.suse.com/1223664" }, { "category": "self", "summary": "SUSE Bug 1223668", "url": "https://bugzilla.suse.com/1223668" }, { "category": "self", "summary": "SUSE Bug 1223670", "url": "https://bugzilla.suse.com/1223670" }, { "category": "self", "summary": "SUSE Bug 1223679", "url": "https://bugzilla.suse.com/1223679" }, { "category": "self", "summary": "SUSE Bug 1223686", "url": "https://bugzilla.suse.com/1223686" }, { "category": "self", "summary": "SUSE Bug 1223693", "url": "https://bugzilla.suse.com/1223693" }, { "category": "self", "summary": "SUSE Bug 1223705", "url": "https://bugzilla.suse.com/1223705" }, { "category": "self", "summary": "SUSE Bug 1223714", "url": "https://bugzilla.suse.com/1223714" }, { "category": "self", "summary": "SUSE Bug 1223735", "url": "https://bugzilla.suse.com/1223735" }, { "category": "self", "summary": "SUSE Bug 1223738", "url": "https://bugzilla.suse.com/1223738" }, { "category": "self", "summary": "SUSE Bug 1223745", "url": "https://bugzilla.suse.com/1223745" }, { "category": "self", "summary": "SUSE Bug 1223784", "url": "https://bugzilla.suse.com/1223784" }, { "category": "self", "summary": "SUSE Bug 1223785", "url": "https://bugzilla.suse.com/1223785" }, { "category": "self", "summary": "SUSE Bug 1223790", "url": "https://bugzilla.suse.com/1223790" }, { "category": "self", "summary": "SUSE Bug 1223816", "url": "https://bugzilla.suse.com/1223816" }, { "category": "self", "summary": "SUSE Bug 1223821", "url": "https://bugzilla.suse.com/1223821" }, { "category": "self", "summary": "SUSE Bug 1223822", "url": "https://bugzilla.suse.com/1223822" }, { "category": "self", "summary": "SUSE Bug 1223823", "url": "https://bugzilla.suse.com/1223823" }, { "category": "self", "summary": "SUSE Bug 1223824", "url": "https://bugzilla.suse.com/1223824" }, { "category": "self", "summary": "SUSE Bug 1223827", "url": "https://bugzilla.suse.com/1223827" }, { "category": "self", "summary": "SUSE Bug 1223834", "url": "https://bugzilla.suse.com/1223834" }, { "category": "self", "summary": "SUSE Bug 1223858", "url": "https://bugzilla.suse.com/1223858" }, { "category": "self", "summary": "SUSE Bug 1223875", "url": "https://bugzilla.suse.com/1223875" }, { "category": "self", "summary": "SUSE Bug 1223876", "url": "https://bugzilla.suse.com/1223876" }, { "category": "self", "summary": "SUSE Bug 1223877", "url": "https://bugzilla.suse.com/1223877" }, { "category": "self", "summary": "SUSE Bug 1223878", "url": "https://bugzilla.suse.com/1223878" }, { "category": "self", "summary": "SUSE Bug 1223879", "url": "https://bugzilla.suse.com/1223879" }, { "category": "self", "summary": "SUSE Bug 1223894", "url": "https://bugzilla.suse.com/1223894" }, { "category": "self", "summary": "SUSE Bug 1223921", "url": "https://bugzilla.suse.com/1223921" }, { "category": "self", "summary": "SUSE Bug 1223922", "url": "https://bugzilla.suse.com/1223922" }, { "category": "self", "summary": "SUSE Bug 1223923", "url": "https://bugzilla.suse.com/1223923" }, { "category": "self", "summary": "SUSE Bug 1223924", "url": "https://bugzilla.suse.com/1223924" }, { "category": "self", "summary": "SUSE Bug 1223929", "url": "https://bugzilla.suse.com/1223929" }, { "category": "self", "summary": "SUSE Bug 1223931", "url": "https://bugzilla.suse.com/1223931" }, { "category": "self", "summary": "SUSE Bug 1223932", "url": "https://bugzilla.suse.com/1223932" }, { "category": "self", "summary": "SUSE Bug 1223934", "url": "https://bugzilla.suse.com/1223934" }, { "category": "self", "summary": "SUSE Bug 1223941", "url": "https://bugzilla.suse.com/1223941" }, { "category": "self", "summary": "SUSE Bug 1223948", "url": "https://bugzilla.suse.com/1223948" }, { "category": "self", "summary": "SUSE Bug 1223949", "url": "https://bugzilla.suse.com/1223949" }, { "category": "self", "summary": "SUSE Bug 1223950", "url": "https://bugzilla.suse.com/1223950" }, { "category": "self", "summary": "SUSE Bug 1223951", "url": "https://bugzilla.suse.com/1223951" }, { "category": "self", "summary": "SUSE Bug 1223952", "url": "https://bugzilla.suse.com/1223952" }, { "category": "self", "summary": "SUSE Bug 1223953", "url": "https://bugzilla.suse.com/1223953" }, { "category": "self", "summary": "SUSE Bug 1223956", "url": "https://bugzilla.suse.com/1223956" }, { "category": "self", "summary": "SUSE Bug 1223957", "url": "https://bugzilla.suse.com/1223957" }, { "category": "self", "summary": "SUSE Bug 1223960", "url": "https://bugzilla.suse.com/1223960" }, { "category": "self", "summary": "SUSE Bug 1223962", "url": "https://bugzilla.suse.com/1223962" }, { "category": "self", "summary": "SUSE Bug 1223963", "url": "https://bugzilla.suse.com/1223963" }, { "category": "self", "summary": "SUSE Bug 1223964", "url": "https://bugzilla.suse.com/1223964" }, { "category": "self", "summary": "SUSE Bug 1223996", "url": "https://bugzilla.suse.com/1223996" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47047 page", "url": "https://www.suse.com/security/cve/CVE-2021-47047/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47184 page", "url": "https://www.suse.com/security/cve/CVE-2021-47184/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47185 page", "url": "https://www.suse.com/security/cve/CVE-2021-47185/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47187 page", "url": "https://www.suse.com/security/cve/CVE-2021-47187/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47188 page", "url": "https://www.suse.com/security/cve/CVE-2021-47188/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47191 page", "url": "https://www.suse.com/security/cve/CVE-2021-47191/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47192 page", "url": "https://www.suse.com/security/cve/CVE-2021-47192/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47193 page", "url": "https://www.suse.com/security/cve/CVE-2021-47193/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47194 page", "url": "https://www.suse.com/security/cve/CVE-2021-47194/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47195 page", "url": "https://www.suse.com/security/cve/CVE-2021-47195/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47196 page", "url": "https://www.suse.com/security/cve/CVE-2021-47196/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47197 page", "url": "https://www.suse.com/security/cve/CVE-2021-47197/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47198 page", "url": "https://www.suse.com/security/cve/CVE-2021-47198/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47199 page", "url": "https://www.suse.com/security/cve/CVE-2021-47199/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47200 page", "url": "https://www.suse.com/security/cve/CVE-2021-47200/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47201 page", "url": "https://www.suse.com/security/cve/CVE-2021-47201/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47202 page", "url": "https://www.suse.com/security/cve/CVE-2021-47202/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47203 page", "url": "https://www.suse.com/security/cve/CVE-2021-47203/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47204 page", "url": "https://www.suse.com/security/cve/CVE-2021-47204/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47205 page", "url": "https://www.suse.com/security/cve/CVE-2021-47205/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47206 page", "url": "https://www.suse.com/security/cve/CVE-2021-47206/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47207 page", "url": "https://www.suse.com/security/cve/CVE-2021-47207/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47209 page", "url": "https://www.suse.com/security/cve/CVE-2021-47209/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47210 page", "url": "https://www.suse.com/security/cve/CVE-2021-47210/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47211 page", "url": "https://www.suse.com/security/cve/CVE-2021-47211/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47212 page", "url": "https://www.suse.com/security/cve/CVE-2021-47212/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47214 page", "url": "https://www.suse.com/security/cve/CVE-2021-47214/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47215 page", "url": "https://www.suse.com/security/cve/CVE-2021-47215/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47216 page", "url": "https://www.suse.com/security/cve/CVE-2021-47216/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47217 page", "url": "https://www.suse.com/security/cve/CVE-2021-47217/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47218 page", "url": "https://www.suse.com/security/cve/CVE-2021-47218/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-47219 page", "url": "https://www.suse.com/security/cve/CVE-2021-47219/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48631 page", "url": "https://www.suse.com/security/cve/CVE-2022-48631/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48632 page", "url": "https://www.suse.com/security/cve/CVE-2022-48632/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48634 page", "url": "https://www.suse.com/security/cve/CVE-2022-48634/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48636 page", "url": "https://www.suse.com/security/cve/CVE-2022-48636/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48637 page", "url": "https://www.suse.com/security/cve/CVE-2022-48637/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48638 page", "url": "https://www.suse.com/security/cve/CVE-2022-48638/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48639 page", "url": "https://www.suse.com/security/cve/CVE-2022-48639/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48640 page", "url": "https://www.suse.com/security/cve/CVE-2022-48640/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48642 page", "url": "https://www.suse.com/security/cve/CVE-2022-48642/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48644 page", "url": "https://www.suse.com/security/cve/CVE-2022-48644/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48646 page", "url": "https://www.suse.com/security/cve/CVE-2022-48646/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48647 page", "url": "https://www.suse.com/security/cve/CVE-2022-48647/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48648 page", "url": "https://www.suse.com/security/cve/CVE-2022-48648/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48650 page", "url": "https://www.suse.com/security/cve/CVE-2022-48650/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48651 page", "url": "https://www.suse.com/security/cve/CVE-2022-48651/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48652 page", "url": "https://www.suse.com/security/cve/CVE-2022-48652/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48653 page", "url": "https://www.suse.com/security/cve/CVE-2022-48653/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48654 page", "url": "https://www.suse.com/security/cve/CVE-2022-48654/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48655 page", "url": "https://www.suse.com/security/cve/CVE-2022-48655/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48656 page", "url": "https://www.suse.com/security/cve/CVE-2022-48656/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48657 page", "url": "https://www.suse.com/security/cve/CVE-2022-48657/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48658 page", "url": "https://www.suse.com/security/cve/CVE-2022-48658/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48659 page", "url": "https://www.suse.com/security/cve/CVE-2022-48659/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48660 page", "url": "https://www.suse.com/security/cve/CVE-2022-48660/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48662 page", "url": "https://www.suse.com/security/cve/CVE-2022-48662/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48663 page", "url": "https://www.suse.com/security/cve/CVE-2022-48663/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48667 page", "url": "https://www.suse.com/security/cve/CVE-2022-48667/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48668 page", "url": "https://www.suse.com/security/cve/CVE-2022-48668/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48671 page", "url": "https://www.suse.com/security/cve/CVE-2022-48671/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48672 page", "url": "https://www.suse.com/security/cve/CVE-2022-48672/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48673 page", "url": "https://www.suse.com/security/cve/CVE-2022-48673/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48675 page", "url": "https://www.suse.com/security/cve/CVE-2022-48675/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48686 page", "url": "https://www.suse.com/security/cve/CVE-2022-48686/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48687 page", "url": "https://www.suse.com/security/cve/CVE-2022-48687/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48688 page", "url": "https://www.suse.com/security/cve/CVE-2022-48688/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48690 page", "url": "https://www.suse.com/security/cve/CVE-2022-48690/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48692 page", "url": "https://www.suse.com/security/cve/CVE-2022-48692/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48693 page", "url": "https://www.suse.com/security/cve/CVE-2022-48693/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48694 page", "url": "https://www.suse.com/security/cve/CVE-2022-48694/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48695 page", "url": "https://www.suse.com/security/cve/CVE-2022-48695/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48697 page", "url": "https://www.suse.com/security/cve/CVE-2022-48697/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48698 page", "url": "https://www.suse.com/security/cve/CVE-2022-48698/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48699 page", "url": "https://www.suse.com/security/cve/CVE-2022-48699/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48700 page", "url": "https://www.suse.com/security/cve/CVE-2022-48700/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48701 page", "url": "https://www.suse.com/security/cve/CVE-2022-48701/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48702 page", "url": "https://www.suse.com/security/cve/CVE-2022-48702/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48703 page", "url": "https://www.suse.com/security/cve/CVE-2022-48703/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-48704 page", "url": "https://www.suse.com/security/cve/CVE-2022-48704/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-2860 page", "url": "https://www.suse.com/security/cve/CVE-2023-2860/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52585 page", "url": "https://www.suse.com/security/cve/CVE-2023-52585/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52589 page", "url": "https://www.suse.com/security/cve/CVE-2023-52589/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52590 page", "url": "https://www.suse.com/security/cve/CVE-2023-52590/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52591 page", "url": "https://www.suse.com/security/cve/CVE-2023-52591/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52593 page", "url": "https://www.suse.com/security/cve/CVE-2023-52593/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52614 page", "url": "https://www.suse.com/security/cve/CVE-2023-52614/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52616 page", "url": "https://www.suse.com/security/cve/CVE-2023-52616/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52620 page", "url": "https://www.suse.com/security/cve/CVE-2023-52620/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52635 page", "url": "https://www.suse.com/security/cve/CVE-2023-52635/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52645 page", "url": "https://www.suse.com/security/cve/CVE-2023-52645/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52646 page", "url": "https://www.suse.com/security/cve/CVE-2023-52646/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-52652 page", "url": "https://www.suse.com/security/cve/CVE-2023-52652/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-6270 page", "url": "https://www.suse.com/security/cve/CVE-2023-6270/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-0639 page", "url": "https://www.suse.com/security/cve/CVE-2024-0639/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-0841 page", "url": "https://www.suse.com/security/cve/CVE-2024-0841/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-2201 page", "url": "https://www.suse.com/security/cve/CVE-2024-2201/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22099 page", "url": "https://www.suse.com/security/cve/CVE-2024-22099/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23307 page", "url": "https://www.suse.com/security/cve/CVE-2024-23307/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23848 page", "url": "https://www.suse.com/security/cve/CVE-2024-23848/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23850 page", "url": "https://www.suse.com/security/cve/CVE-2024-23850/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26601 page", "url": "https://www.suse.com/security/cve/CVE-2024-26601/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26610 page", "url": "https://www.suse.com/security/cve/CVE-2024-26610/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26656 page", "url": "https://www.suse.com/security/cve/CVE-2024-26656/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26671 page", "url": "https://www.suse.com/security/cve/CVE-2024-26671/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26673 page", "url": "https://www.suse.com/security/cve/CVE-2024-26673/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26675 page", "url": "https://www.suse.com/security/cve/CVE-2024-26675/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26679 page", "url": "https://www.suse.com/security/cve/CVE-2024-26679/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26687 page", "url": "https://www.suse.com/security/cve/CVE-2024-26687/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26688 page", "url": "https://www.suse.com/security/cve/CVE-2024-26688/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26700 page", "url": "https://www.suse.com/security/cve/CVE-2024-26700/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26702 page", "url": "https://www.suse.com/security/cve/CVE-2024-26702/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26733 page", "url": "https://www.suse.com/security/cve/CVE-2024-26733/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26739 page", "url": "https://www.suse.com/security/cve/CVE-2024-26739/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26764 page", "url": "https://www.suse.com/security/cve/CVE-2024-26764/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26766 page", "url": "https://www.suse.com/security/cve/CVE-2024-26766/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26772 page", "url": "https://www.suse.com/security/cve/CVE-2024-26772/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26773 page", "url": "https://www.suse.com/security/cve/CVE-2024-26773/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26783 page", "url": "https://www.suse.com/security/cve/CVE-2024-26783/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26791 page", "url": "https://www.suse.com/security/cve/CVE-2024-26791/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26792 page", "url": "https://www.suse.com/security/cve/CVE-2024-26792/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26816 page", "url": "https://www.suse.com/security/cve/CVE-2024-26816/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26817 page", "url": "https://www.suse.com/security/cve/CVE-2024-26817/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26820 page", "url": "https://www.suse.com/security/cve/CVE-2024-26820/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26825 page", "url": "https://www.suse.com/security/cve/CVE-2024-26825/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26830 page", "url": "https://www.suse.com/security/cve/CVE-2024-26830/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26833 page", "url": "https://www.suse.com/security/cve/CVE-2024-26833/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26836 page", "url": "https://www.suse.com/security/cve/CVE-2024-26836/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26840 page", "url": "https://www.suse.com/security/cve/CVE-2024-26840/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26843 page", "url": "https://www.suse.com/security/cve/CVE-2024-26843/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26852 page", "url": "https://www.suse.com/security/cve/CVE-2024-26852/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26853 page", "url": "https://www.suse.com/security/cve/CVE-2024-26853/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26855 page", "url": "https://www.suse.com/security/cve/CVE-2024-26855/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26856 page", "url": "https://www.suse.com/security/cve/CVE-2024-26856/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26857 page", "url": "https://www.suse.com/security/cve/CVE-2024-26857/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26861 page", "url": "https://www.suse.com/security/cve/CVE-2024-26861/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26862 page", "url": "https://www.suse.com/security/cve/CVE-2024-26862/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26866 page", "url": "https://www.suse.com/security/cve/CVE-2024-26866/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26872 page", "url": "https://www.suse.com/security/cve/CVE-2024-26872/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26875 page", "url": "https://www.suse.com/security/cve/CVE-2024-26875/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26876 page", "url": "https://www.suse.com/security/cve/CVE-2024-26876/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26877 page", "url": "https://www.suse.com/security/cve/CVE-2024-26877/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26878 page", "url": "https://www.suse.com/security/cve/CVE-2024-26878/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26879 page", "url": "https://www.suse.com/security/cve/CVE-2024-26879/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26881 page", "url": "https://www.suse.com/security/cve/CVE-2024-26881/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26882 page", "url": "https://www.suse.com/security/cve/CVE-2024-26882/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26883 page", "url": "https://www.suse.com/security/cve/CVE-2024-26883/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26884 page", "url": "https://www.suse.com/security/cve/CVE-2024-26884/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26885 page", "url": "https://www.suse.com/security/cve/CVE-2024-26885/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26891 page", "url": "https://www.suse.com/security/cve/CVE-2024-26891/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26893 page", "url": "https://www.suse.com/security/cve/CVE-2024-26893/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26895 page", "url": "https://www.suse.com/security/cve/CVE-2024-26895/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26896 page", "url": "https://www.suse.com/security/cve/CVE-2024-26896/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26897 page", "url": "https://www.suse.com/security/cve/CVE-2024-26897/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26898 page", "url": "https://www.suse.com/security/cve/CVE-2024-26898/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26901 page", "url": "https://www.suse.com/security/cve/CVE-2024-26901/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26903 page", "url": "https://www.suse.com/security/cve/CVE-2024-26903/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26915 page", "url": "https://www.suse.com/security/cve/CVE-2024-26915/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26917 page", "url": "https://www.suse.com/security/cve/CVE-2024-26917/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26927 page", "url": "https://www.suse.com/security/cve/CVE-2024-26927/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26933 page", "url": "https://www.suse.com/security/cve/CVE-2024-26933/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26939 page", "url": "https://www.suse.com/security/cve/CVE-2024-26939/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26948 page", "url": "https://www.suse.com/security/cve/CVE-2024-26948/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26950 page", "url": "https://www.suse.com/security/cve/CVE-2024-26950/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26951 page", "url": "https://www.suse.com/security/cve/CVE-2024-26951/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26955 page", "url": "https://www.suse.com/security/cve/CVE-2024-26955/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26956 page", "url": "https://www.suse.com/security/cve/CVE-2024-26956/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26960 page", "url": "https://www.suse.com/security/cve/CVE-2024-26960/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26965 page", "url": "https://www.suse.com/security/cve/CVE-2024-26965/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26966 page", "url": "https://www.suse.com/security/cve/CVE-2024-26966/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26969 page", "url": "https://www.suse.com/security/cve/CVE-2024-26969/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26970 page", "url": "https://www.suse.com/security/cve/CVE-2024-26970/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26972 page", "url": "https://www.suse.com/security/cve/CVE-2024-26972/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26979 page", "url": "https://www.suse.com/security/cve/CVE-2024-26979/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26981 page", "url": "https://www.suse.com/security/cve/CVE-2024-26981/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26982 page", "url": "https://www.suse.com/security/cve/CVE-2024-26982/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-26993 page", "url": "https://www.suse.com/security/cve/CVE-2024-26993/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27013 page", "url": "https://www.suse.com/security/cve/CVE-2024-27013/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27014 page", "url": "https://www.suse.com/security/cve/CVE-2024-27014/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27030 page", "url": "https://www.suse.com/security/cve/CVE-2024-27030/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27038 page", "url": "https://www.suse.com/security/cve/CVE-2024-27038/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27039 page", "url": "https://www.suse.com/security/cve/CVE-2024-27039/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27041 page", "url": "https://www.suse.com/security/cve/CVE-2024-27041/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27042 page", "url": "https://www.suse.com/security/cve/CVE-2024-27042/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27043 page", "url": "https://www.suse.com/security/cve/CVE-2024-27043/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27046 page", "url": "https://www.suse.com/security/cve/CVE-2024-27046/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27056 page", "url": "https://www.suse.com/security/cve/CVE-2024-27056/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27059 page", "url": "https://www.suse.com/security/cve/CVE-2024-27059/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27062 page", "url": "https://www.suse.com/security/cve/CVE-2024-27062/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27389 page", "url": "https://www.suse.com/security/cve/CVE-2024-27389/" } ], "title": "Security update for the Linux Kernel", "tracking": { "current_release_date": "2024-05-14T14:29:53Z", "generator": { "date": "2024-05-14T14:29:53Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:1644-1", "initial_release_date": "2024-05-14T14:29:53Z", "revision_history": [ { "date": "2024-05-14T14:29:53Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kernel-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kernel-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "kernel-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "product_id": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "product_id": "kernel-azure-extra-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "product_id": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "product_id": "kernel-azure-optional-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64" } }, { "category": "product_version", "name": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product": { "name": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "product_id": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "product": { "name": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "product_id": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch" } }, { "category": "product_version", "name": "kernel-source-azure-5.14.21-150500.33.51.1.noarch", "product": { "name": "kernel-source-azure-5.14.21-150500.33.51.1.noarch", "product_id": "kernel-source-azure-5.14.21-150500.33.51.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-azure-extra-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-azure-optional-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64" } }, { "category": "product_version", "name": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product": { "name": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64", "product_id": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-public-cloud:15:sp5" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-5.14.21-150500.33.51.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-5.14.21-150500.33.51.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch" }, "product_reference": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-source-azure-5.14.21-150500.33.51.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch" }, "product_reference": "kernel-source-azure-5.14.21-150500.33.51.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5", "product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-extra-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-extra-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-optional-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-optional-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch" }, "product_reference": "kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-source-azure-5.14.21-150500.33.51.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch" }, "product_reference": "kernel-source-azure-5.14.21-150500.33.51.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64" }, "product_reference": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" }, "product_reference": "reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-47047", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47047" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails\n\nThe spi controller supports 44-bit address space on AXI in DMA mode,\nso set dma_addr_t width to 44-bit to avoid using a swiotlb mapping.\nIn addition, if dma_map_single fails, it should return immediately\ninstead of continuing doing the DMA operation which bases on invalid\naddress.\n\nThis fixes the following crash which occurs in reading a big block\nfrom flash:\n\n[ 123.633577] zynqmp-qspi ff0f0000.spi: swiotlb buffer is full (sz: 4194304 bytes), total 32768 (slots), used 0 (slots)\n[ 123.644230] zynqmp-qspi ff0f0000.spi: ERR:rxdma:memory not mapped\n[ 123.784625] Unable to handle kernel paging request at virtual address 00000000003fffc0\n[ 123.792536] Mem abort info:\n[ 123.795313] ESR = 0x96000145\n[ 123.798351] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 123.803655] SET = 0, FnV = 0\n[ 123.806693] EA = 0, S1PTW = 0\n[ 123.809818] Data abort info:\n[ 123.812683] ISV = 0, ISS = 0x00000145\n[ 123.816503] CM = 1, WnR = 1\n[ 123.819455] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000805047000\n[ 123.825887] [00000000003fffc0] pgd=0000000803b45003, p4d=0000000803b45003, pud=0000000000000000\n[ 123.834586] Internal error: Oops: 96000145 [#1] PREEMPT SMP", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47047", "url": "https://www.suse.com/security/cve/CVE-2021-47047" }, { "category": "external", "summary": "SUSE Bug 1220761 for CVE-2021-47047", "url": "https://bugzilla.suse.com/1220761" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47047" }, { "cve": "CVE-2021-47184", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47184" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix NULL ptr dereference on VSI filter sync\n\nRemove the reason of null pointer dereference in sync VSI filters.\nAdded new I40E_VSI_RELEASING flag to signalize deleting and releasing\nof VSI resources to sync this thread with sync filters subtask.\nWithout this patch it is possible to start update the VSI filter list\nafter VSI is removed, that\u0027s causing a kernel oops.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47184", "url": "https://www.suse.com/security/cve/CVE-2021-47184" }, { "category": "external", "summary": "SUSE Bug 1222666 for CVE-2021-47184", "url": "https://bugzilla.suse.com/1222666" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47184" }, { "cve": "CVE-2021-47185", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47185" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: tty_buffer: Fix the softlockup issue in flush_to_ldisc\n\nWhen running ltp testcase(ltp/testcases/kernel/pty/pty04.c) with arm64, there is a soft lockup,\nwhich look like this one:\n\n Workqueue: events_unbound flush_to_ldisc\n Call trace:\n dump_backtrace+0x0/0x1ec\n show_stack+0x24/0x30\n dump_stack+0xd0/0x128\n panic+0x15c/0x374\n watchdog_timer_fn+0x2b8/0x304\n __run_hrtimer+0x88/0x2c0\n __hrtimer_run_queues+0xa4/0x120\n hrtimer_interrupt+0xfc/0x270\n arch_timer_handler_phys+0x40/0x50\n handle_percpu_devid_irq+0x94/0x220\n __handle_domain_irq+0x88/0xf0\n gic_handle_irq+0x84/0xfc\n el1_irq+0xc8/0x180\n slip_unesc+0x80/0x214 [slip]\n tty_ldisc_receive_buf+0x64/0x80\n tty_port_default_receive_buf+0x50/0x90\n flush_to_ldisc+0xbc/0x110\n process_one_work+0x1d4/0x4b0\n worker_thread+0x180/0x430\n kthread+0x11c/0x120\n\nIn the testcase pty04, The first process call the write syscall to send\ndata to the pty master. At the same time, the workqueue will do the\nflush_to_ldisc to pop data in a loop until there is no more data left.\nWhen the sender and workqueue running in different core, the sender sends\ndata fastly in full time which will result in workqueue doing work in loop\nfor a long time and occuring softlockup in flush_to_ldisc with kernel\nconfigured without preempt. So I add need_resched check and cond_resched\nin the flush_to_ldisc loop to avoid it.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47185", "url": "https://www.suse.com/security/cve/CVE-2021-47185" }, { "category": "external", "summary": "SUSE Bug 1222669 for CVE-2021-47185", "url": "https://bugzilla.suse.com/1222669" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47185" }, { "cve": "CVE-2021-47187", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47187" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency\n\nThe entry/exit latency and minimum residency in state for the idle\nstates of MSM8998 were ..bad: first of all, for all of them the\ntimings were written for CPU sleep but the min-residency-us param\nwas miscalculated (supposedly, while porting this from downstream);\nThen, the power collapse states are setting PC on both the CPU\ncluster *and* the L2 cache, which have different timings: in the\nspecific case of L2 the times are higher so these ones should be\ntaken into account instead of the CPU ones.\n\nThis parameter misconfiguration was not giving particular issues\nbecause on MSM8998 there was no CPU scaling at all, so cluster/L2\npower collapse was rarely (if ever) hit.\nWhen CPU scaling is enabled, though, the wrong timings will produce\nSoC unstability shown to the user as random, apparently error-less,\nsudden reboots and/or lockups.\n\nThis set of parameters are stabilizing the SoC when CPU scaling is\nON and when power collapse is frequently hit.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47187", "url": "https://www.suse.com/security/cve/CVE-2021-47187" }, { "category": "external", "summary": "SUSE Bug 1222703 for CVE-2021-47187", "url": "https://bugzilla.suse.com/1222703" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47187" }, { "cve": "CVE-2021-47188", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47188" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: Improve SCSI abort handling\n\nThe following has been observed on a test setup:\n\nWARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c\nCall trace:\n ufshcd_queuecommand+0x468/0x65c\n scsi_send_eh_cmnd+0x224/0x6a0\n scsi_eh_test_devices+0x248/0x418\n scsi_eh_ready_devs+0xc34/0xe58\n scsi_error_handler+0x204/0x80c\n kthread+0x150/0x1b4\n ret_from_fork+0x10/0x30\n\nThat warning is triggered by the following statement:\n\n\tWARN_ON(lrbp-\u003ecmd);\n\nFix this warning by clearing lrbp-\u003ecmd from the abort handler.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47188", "url": "https://www.suse.com/security/cve/CVE-2021-47188" }, { "category": "external", "summary": "SUSE Bug 1222671 for CVE-2021-47188", "url": "https://bugzilla.suse.com/1222671" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47188" }, { "cve": "CVE-2021-47191", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47191" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: scsi_debug: Fix out-of-bound read in resp_readcap16()\n\nThe following warning was observed running syzkaller:\n\n[ 3813.830724] sg_write: data in/out 65466/242 bytes for SCSI command 0x9e-- guessing data in;\n[ 3813.830724] program syz-executor not setting count and/or reply_len properly\n[ 3813.836956] ==================================================================\n[ 3813.839465] BUG: KASAN: stack-out-of-bounds in sg_copy_buffer+0x157/0x1e0\n[ 3813.841773] Read of size 4096 at addr ffff8883cf80f540 by task syz-executor/1549\n[ 3813.846612] Call Trace:\n[ 3813.846995] dump_stack+0x108/0x15f\n[ 3813.847524] print_address_description+0xa5/0x372\n[ 3813.848243] kasan_report.cold+0x236/0x2a8\n[ 3813.849439] check_memory_region+0x240/0x270\n[ 3813.850094] memcpy+0x30/0x80\n[ 3813.850553] sg_copy_buffer+0x157/0x1e0\n[ 3813.853032] sg_copy_from_buffer+0x13/0x20\n[ 3813.853660] fill_from_dev_buffer+0x135/0x370\n[ 3813.854329] resp_readcap16+0x1ac/0x280\n[ 3813.856917] schedule_resp+0x41f/0x1630\n[ 3813.858203] scsi_debug_queuecommand+0xb32/0x17e0\n[ 3813.862699] scsi_dispatch_cmd+0x330/0x950\n[ 3813.863329] scsi_request_fn+0xd8e/0x1710\n[ 3813.863946] __blk_run_queue+0x10b/0x230\n[ 3813.864544] blk_execute_rq_nowait+0x1d8/0x400\n[ 3813.865220] sg_common_write.isra.0+0xe61/0x2420\n[ 3813.871637] sg_write+0x6c8/0xef0\n[ 3813.878853] __vfs_write+0xe4/0x800\n[ 3813.883487] vfs_write+0x17b/0x530\n[ 3813.884008] ksys_write+0x103/0x270\n[ 3813.886268] __x64_sys_write+0x77/0xc0\n[ 3813.886841] do_syscall_64+0x106/0x360\n[ 3813.887415] entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nThis issue can be reproduced with the following syzkaller log:\n\nr0 = openat(0xffffffffffffff9c, \u0026(0x7f0000000040)=\u0027./file0\\x00\u0027, 0x26e1, 0x0)\nr1 = syz_open_procfs(0xffffffffffffffff, \u0026(0x7f0000000000)=\u0027fd/3\\x00\u0027)\nopen_by_handle_at(r1, \u0026(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x602000)\nr2 = syz_open_dev$sg(\u0026(0x7f0000000000), 0x0, 0x40782)\nwrite$binfmt_aout(r2, \u0026(0x7f0000000340)=ANY=[@ANYBLOB=\"00000000deff000000000000000000000000000000000000000000000000000047f007af9e107a41ec395f1bded7be24277a1501ff6196a83366f4e6362bc0ff2b247f68a972989b094b2da4fb3607fcf611a22dd04310d28c75039d\"], 0x126)\n\nIn resp_readcap16() we get \"int alloc_len\" value -1104926854, and then pass\nthe huge arr_len to fill_from_dev_buffer(), but arr is only 32 bytes. This\nleads to OOB in sg_copy_buffer().\n\nTo solve this issue, define alloc_len as u32.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47191", "url": "https://www.suse.com/security/cve/CVE-2021-47191" }, { "category": "external", "summary": "SUSE Bug 1222866 for CVE-2021-47191", "url": "https://bugzilla.suse.com/1222866" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47191" }, { "cve": "CVE-2021-47192", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47192" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: sysfs: Fix hang when device state is set via sysfs\n\nThis fixes a regression added with:\n\ncommit f0f82e2476f6 (\"scsi: core: Fix capacity set to zero after\nofflinining device\")\n\nThe problem is that after iSCSI recovery, iscsid will call into the kernel\nto set the dev\u0027s state to running, and with that patch we now call\nscsi_rescan_device() with the state_mutex held. If the SCSI error handler\nthread is just starting to test the device in scsi_send_eh_cmnd() then it\u0027s\ngoing to try to grab the state_mutex.\n\nWe are then stuck, because when scsi_rescan_device() tries to send its I/O\nscsi_queue_rq() calls -\u003e scsi_host_queue_ready() -\u003e scsi_host_in_recovery()\nwhich will return true (the host state is still in recovery) and I/O will\njust be requeued. scsi_send_eh_cmnd() will then never be able to grab the\nstate_mutex to finish error handling.\n\nTo prevent the deadlock move the rescan-related code to after we drop the\nstate_mutex.\n\nThis also adds a check for if we are already in the running state. This\nprevents extra scans and helps the iscsid case where if the transport class\nhas already onlined the device during its recovery process then we don\u0027t\nneed userspace to do it again plus possibly block that daemon.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47192", "url": "https://www.suse.com/security/cve/CVE-2021-47192" }, { "category": "external", "summary": "SUSE Bug 1222867 for CVE-2021-47192", "url": "https://bugzilla.suse.com/1222867" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47192" }, { "cve": "CVE-2021-47193", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47193" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: pm80xx: Fix memory leak during rmmod\n\nDriver failed to release all memory allocated. This would lead to memory\nleak during driver removal.\n\nProperly free memory when the module is removed.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47193", "url": "https://www.suse.com/security/cve/CVE-2021-47193" }, { "category": "external", "summary": "SUSE Bug 1222879 for CVE-2021-47193", "url": "https://bugzilla.suse.com/1222879" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47193" }, { "cve": "CVE-2021-47194", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47194" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncfg80211: call cfg80211_stop_ap when switch from P2P_GO type\n\nIf the userspace tools switch from NL80211_IFTYPE_P2P_GO to\nNL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it\ndoes not call the cleanup cfg80211_stop_ap(), this leads to the\ninitialization of in-use data. For example, this path re-init the\nsdata-\u003eassigned_chanctx_list while it is still an element of\nassigned_vifs list, and makes that linked list corrupt.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47194", "url": "https://www.suse.com/security/cve/CVE-2021-47194" }, { "category": "external", "summary": "SUSE Bug 1222829 for CVE-2021-47194", "url": "https://bugzilla.suse.com/1222829" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47194" }, { "cve": "CVE-2021-47195", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47195" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: fix use-after-free of the add_lock mutex\n\nCommit 6098475d4cb4 (\"spi: Fix deadlock when adding SPI controllers on\nSPI buses\") introduced a per-controller mutex. But mutex_unlock() of\nsaid lock is called after the controller is already freed:\n\n spi_unregister_controller(ctlr)\n -\u003e put_device(\u0026ctlr-\u003edev)\n -\u003e spi_controller_release(dev)\n -\u003e mutex_unlock(\u0026ctrl-\u003eadd_lock)\n\nMove the put_device() after the mutex_unlock().", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47195", "url": "https://www.suse.com/security/cve/CVE-2021-47195" }, { "category": "external", "summary": "SUSE Bug 1222832 for CVE-2021-47195", "url": "https://bugzilla.suse.com/1222832" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47195" }, { "cve": "CVE-2021-47196", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47196" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Set send and receive CQ before forwarding to the driver\n\nPreset both receive and send CQ pointers prior to call to the drivers and\noverwrite it later again till the mlx4 is going to be changed do not\noverwrite ibqp properties.\n\nThis change is needed for mlx5, because in case of QP creation failure, it\nwill go to the path of QP destroy which relies on proper CQ pointers.\n\n BUG: KASAN: use-after-free in create_qp.cold+0x164/0x16e [mlx5_ib]\n Write of size 8 at addr ffff8880064c55c0 by task a.out/246\n\n CPU: 0 PID: 246 Comm: a.out Not tainted 5.15.0+ #291\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n Call Trace:\n dump_stack_lvl+0x45/0x59\n print_address_description.constprop.0+0x1f/0x140\n kasan_report.cold+0x83/0xdf\n create_qp.cold+0x164/0x16e [mlx5_ib]\n mlx5_ib_create_qp+0x358/0x28a0 [mlx5_ib]\n create_qp.part.0+0x45b/0x6a0 [ib_core]\n ib_create_qp_user+0x97/0x150 [ib_core]\n ib_uverbs_handler_UVERBS_METHOD_QP_CREATE+0x92c/0x1250 [ib_uverbs]\n ib_uverbs_cmd_verbs+0x1c38/0x3150 [ib_uverbs]\n ib_uverbs_ioctl+0x169/0x260 [ib_uverbs]\n __x64_sys_ioctl+0x866/0x14d0\n do_syscall_64+0x3d/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\n Allocated by task 246:\n kasan_save_stack+0x1b/0x40\n __kasan_kmalloc+0xa4/0xd0\n create_qp.part.0+0x92/0x6a0 [ib_core]\n ib_create_qp_user+0x97/0x150 [ib_core]\n ib_uverbs_handler_UVERBS_METHOD_QP_CREATE+0x92c/0x1250 [ib_uverbs]\n ib_uverbs_cmd_verbs+0x1c38/0x3150 [ib_uverbs]\n ib_uverbs_ioctl+0x169/0x260 [ib_uverbs]\n __x64_sys_ioctl+0x866/0x14d0\n do_syscall_64+0x3d/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\n Freed by task 246:\n kasan_save_stack+0x1b/0x40\n kasan_set_track+0x1c/0x30\n kasan_set_free_info+0x20/0x30\n __kasan_slab_free+0x10c/0x150\n slab_free_freelist_hook+0xb4/0x1b0\n kfree+0xe7/0x2a0\n create_qp.part.0+0x52b/0x6a0 [ib_core]\n ib_create_qp_user+0x97/0x150 [ib_core]\n ib_uverbs_handler_UVERBS_METHOD_QP_CREATE+0x92c/0x1250 [ib_uverbs]\n ib_uverbs_cmd_verbs+0x1c38/0x3150 [ib_uverbs]\n ib_uverbs_ioctl+0x169/0x260 [ib_uverbs]\n __x64_sys_ioctl+0x866/0x14d0\n do_syscall_64+0x3d/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47196", "url": "https://www.suse.com/security/cve/CVE-2021-47196" }, { "category": "external", "summary": "SUSE Bug 1222773 for CVE-2021-47196", "url": "https://bugzilla.suse.com/1222773" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47196" }, { "cve": "CVE-2021-47197", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47197" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: nullify cq-\u003edbg pointer in mlx5_debug_cq_remove()\n\nPrior to this patch in case mlx5_core_destroy_cq() failed it proceeds\nto rest of destroy operations. mlx5_core_destroy_cq() could be called again\nby user and cause additional call of mlx5_debug_cq_remove().\ncq-\u003edbg was not nullify in previous call and cause the crash.\n\nFix it by nullify cq-\u003edbg pointer after removal.\n\nAlso proceed to destroy operations only if FW return 0\nfor MLX5_CMD_OP_DESTROY_CQ command.\n\ngeneral protection fault, probably for non-canonical address 0x2000300004058: 0000 [#1] SMP PTI\nCPU: 5 PID: 1228 Comm: python Not tainted 5.15.0-rc5_for_upstream_min_debug_2021_10_14_11_06 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nRIP: 0010:lockref_get+0x1/0x60\nCode: 5d e9 53 ff ff ff 48 8d 7f 70 e8 0a 2e 48 00 c7 85 d0 00 00 00 02\n00 00 00 c6 45 70 00 fb 5d c3 c3 cc cc cc cc cc cc cc cc 53 \u003c48\u003e 8b 17\n48 89 fb 85 d2 75 3d 48 89 d0 bf 64 00 00 00 48 89 c1 48\nRSP: 0018:ffff888137dd7a38 EFLAGS: 00010206\nRAX: 0000000000000000 RBX: ffff888107d5f458 RCX: 00000000fffffffe\nRDX: 000000000002c2b0 RSI: ffffffff8155e2e0 RDI: 0002000300004058\nRBP: ffff888137dd7a88 R08: 0002000300004058 R09: ffff8881144a9f88\nR10: 0000000000000000 R11: 0000000000000000 R12: ffff8881141d4000\nR13: ffff888137dd7c68 R14: ffff888137dd7d58 R15: ffff888137dd7cc0\nFS: 00007f4644f2a4c0(0000) GS:ffff8887a2d40000(0000)\nknlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055b4500f4380 CR3: 0000000114f7a003 CR4: 0000000000170ea0\nCall Trace:\n simple_recursive_removal+0x33/0x2e0\n ? debugfs_remove+0x60/0x60\n debugfs_remove+0x40/0x60\n mlx5_debug_cq_remove+0x32/0x70 [mlx5_core]\n mlx5_core_destroy_cq+0x41/0x1d0 [mlx5_core]\n devx_obj_cleanup+0x151/0x330 [mlx5_ib]\n ? __pollwait+0xd0/0xd0\n ? xas_load+0x5/0x70\n ? xa_load+0x62/0xa0\n destroy_hw_idr_uobject+0x20/0x80 [ib_uverbs]\n uverbs_destroy_uobject+0x3b/0x360 [ib_uverbs]\n uobj_destroy+0x54/0xa0 [ib_uverbs]\n ib_uverbs_cmd_verbs+0xaf2/0x1160 [ib_uverbs]\n ? uverbs_finalize_object+0xd0/0xd0 [ib_uverbs]\n ib_uverbs_ioctl+0xc4/0x1b0 [ib_uverbs]\n __x64_sys_ioctl+0x3e4/0x8e0", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47197", "url": "https://www.suse.com/security/cve/CVE-2021-47197" }, { "category": "external", "summary": "SUSE Bug 1222776 for CVE-2021-47197", "url": "https://bugzilla.suse.com/1222776" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47197" }, { "cve": "CVE-2021-47198", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47198" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine\n\nAn error is detected with the following report when unloading the driver:\n \"KASAN: use-after-free in lpfc_unreg_rpi+0x1b1b\"\n\nThe NLP_REG_LOGIN_SEND nlp_flag is set in lpfc_reg_fab_ctrl_node(), but the\nflag is not cleared upon completion of the login.\n\nThis allows a second call to lpfc_unreg_rpi() to proceed with nlp_rpi set\nto LPFC_RPI_ALLOW_ERROR. This results in a use after free access when used\nas an rpi_ids array index.\n\nFix by clearing the NLP_REG_LOGIN_SEND nlp_flag in\nlpfc_mbx_cmpl_fc_reg_login().", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47198", "url": "https://www.suse.com/security/cve/CVE-2021-47198" }, { "category": "external", "summary": "SUSE Bug 1222883 for CVE-2021-47198", "url": "https://bugzilla.suse.com/1222883" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47198" }, { "cve": "CVE-2021-47199", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47199" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: CT, Fix multiple allocations and memleak of mod acts\n\nCT clear action offload adds additional mod hdr actions to the\nflow\u0027s original mod actions in order to clear the registers which\nhold ct_state.\nWhen such flow also includes encap action, a neigh update event\ncan cause the driver to unoffload the flow and then reoffload it.\n\nEach time this happens, the ct clear handling adds that same set\nof mod hdr actions to reset ct_state until the max of mod hdr\nactions is reached.\n\nAlso the driver never releases the allocated mod hdr actions and\ncausing a memleak.\n\nFix above two issues by moving CT clear mod acts allocation\ninto the parsing actions phase and only use it when offloading the rule.\nThe release of mod acts will be done in the normal flow_put().\n\n backtrace:\n [\u003c000000007316e2f3\u003e] krealloc+0x83/0xd0\n [\u003c00000000ef157de1\u003e] mlx5e_mod_hdr_alloc+0x147/0x300 [mlx5_core]\n [\u003c00000000970ce4ae\u003e] mlx5e_tc_match_to_reg_set_and_get_id+0xd7/0x240 [mlx5_core]\n [\u003c0000000067c5fa17\u003e] mlx5e_tc_match_to_reg_set+0xa/0x20 [mlx5_core]\n [\u003c00000000d032eb98\u003e] mlx5_tc_ct_entry_set_registers.isra.0+0x36/0xc0 [mlx5_core]\n [\u003c00000000fd23b869\u003e] mlx5_tc_ct_flow_offload+0x272/0x1f10 [mlx5_core]\n [\u003c000000004fc24acc\u003e] mlx5e_tc_offload_fdb_rules.part.0+0x150/0x620 [mlx5_core]\n [\u003c00000000dc741c17\u003e] mlx5e_tc_encap_flows_add+0x489/0x690 [mlx5_core]\n [\u003c00000000e92e49d7\u003e] mlx5e_rep_update_flows+0x6e4/0x9b0 [mlx5_core]\n [\u003c00000000f60f5602\u003e] mlx5e_rep_neigh_update+0x39a/0x5d0 [mlx5_core]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47199", "url": "https://www.suse.com/security/cve/CVE-2021-47199" }, { "category": "external", "summary": "SUSE Bug 1222785 for CVE-2021-47199", "url": "https://bugzilla.suse.com/1222785" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47199" }, { "cve": "CVE-2021-47200", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47200" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/prime: Fix use after free in mmap with drm_gem_ttm_mmap\n\ndrm_gem_ttm_mmap() drops a reference to the gem object on success. If\nthe gem object\u0027s refcount == 1 on entry to drm_gem_prime_mmap(), that\ndrop will free the gem object, and the subsequent drm_gem_object_get()\nwill be a UAF. Fix by grabbing a reference before calling the mmap\nhelper.\n\nThis issue was forseen when the reference dropping was adding in\ncommit 9786b65bc61ac (\"drm/ttm: fix mmap refcounting\"):\n \"For that to work properly the drm_gem_object_get() call in\n drm_gem_ttm_mmap() must be moved so it happens before calling\n obj-\u003efuncs-\u003emmap(), otherwise the gem refcount would go down\n to zero.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47200", "url": "https://www.suse.com/security/cve/CVE-2021-47200" }, { "category": "external", "summary": "SUSE Bug 1222838 for CVE-2021-47200", "url": "https://bugzilla.suse.com/1222838" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47200" }, { "cve": "CVE-2021-47201", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47201" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: free q_vectors before queues in iavf_disable_vf\n\niavf_free_queues() clears adapter-\u003enum_active_queues, which\niavf_free_q_vectors() relies on, so swap the order of these two function\ncalls in iavf_disable_vf(). This resolves a panic encountered when the\ninterface is disabled and then later brought up again after PF\ncommunication is restored.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47201", "url": "https://www.suse.com/security/cve/CVE-2021-47201" }, { "category": "external", "summary": "SUSE Bug 1222792 for CVE-2021-47201", "url": "https://bugzilla.suse.com/1222792" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47201" }, { "cve": "CVE-2021-47202", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47202" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: Fix NULL pointer dereferences in of_thermal_ functions\n\nof_parse_thermal_zones() parses the thermal-zones node and registers a\nthermal_zone device for each subnode. However, if a thermal zone is\nconsuming a thermal sensor and that thermal sensor device hasn\u0027t probed\nyet, an attempt to set trip_point_*_temp for that thermal zone device\ncan cause a NULL pointer dereference. Fix it.\n\n console:/sys/class/thermal/thermal_zone87 # echo 120000 \u003e trip_point_0_temp\n ...\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020\n ...\n Call trace:\n of_thermal_set_trip_temp+0x40/0xc4\n trip_point_temp_store+0xc0/0x1dc\n dev_attr_store+0x38/0x88\n sysfs_kf_write+0x64/0xc0\n kernfs_fop_write_iter+0x108/0x1d0\n vfs_write+0x2f4/0x368\n ksys_write+0x7c/0xec\n __arm64_sys_write+0x20/0x30\n el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc\n do_el0_svc+0x28/0xa0\n el0_svc+0x14/0x24\n el0_sync_handler+0x88/0xec\n el0_sync+0x1c0/0x200\n\nWhile at it, fix the possible NULL pointer dereference in other\nfunctions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(),\nof_thermal_get_trend().", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47202", "url": "https://www.suse.com/security/cve/CVE-2021-47202" }, { "category": "external", "summary": "SUSE Bug 1222878 for CVE-2021-47202", "url": "https://bugzilla.suse.com/1222878" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47202" }, { "cve": "CVE-2021-47203", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47203" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()\n\nWhen parsing the txq list in lpfc_drain_txq(), the driver attempts to pass\nthe requests to the adapter. If such an attempt fails, a local \"fail_msg\"\nstring is set and a log message output. The job is then added to a\ncompletions list for cancellation.\n\nProcessing of any further jobs from the txq list continues, but since\n\"fail_msg\" remains set, jobs are added to the completions list regardless\nof whether a wqe was passed to the adapter. If successfully added to\ntxcmplq, jobs are added to both lists resulting in list corruption.\n\nFix by clearing the fail_msg string after adding a job to the completions\nlist. This stops the subsequent jobs from being added to the completions\nlist unless they had an appropriate failure.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47203", "url": "https://www.suse.com/security/cve/CVE-2021-47203" }, { "category": "external", "summary": "SUSE Bug 1222881 for CVE-2021-47203", "url": "https://bugzilla.suse.com/1222881" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47203" }, { "cve": "CVE-2021-47204", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47204" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dpaa2-eth: fix use-after-free in dpaa2_eth_remove\n\nAccess to netdev after free_netdev() will cause use-after-free bug.\nMove debug log before free_netdev() call to avoid it.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47204", "url": "https://www.suse.com/security/cve/CVE-2021-47204" }, { "category": "external", "summary": "SUSE Bug 1222787 for CVE-2021-47204", "url": "https://bugzilla.suse.com/1222787" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47204" }, { "cve": "CVE-2021-47205", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47205" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: Unregister clocks/resets when unbinding\n\nCurrently, unbinding a CCU driver unmaps the device\u0027s MMIO region, while\nleaving its clocks/resets and their providers registered. This can cause\na page fault later when some clock operation tries to perform MMIO. Fix\nthis by separating the CCU initialization from the memory allocation,\nand then using a devres callback to unregister the clocks and resets.\n\nThis also fixes a memory leak of the `struct ccu_reset`, and uses the\ncorrect owner (the specific platform driver) for the clocks and resets.\n\nEarly OF clock providers are never unregistered, and limited error\nhandling is possible, so they are mostly unchanged. The error reporting\nis made more consistent by moving the message inside of_sunxi_ccu_probe.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47205", "url": "https://www.suse.com/security/cve/CVE-2021-47205" }, { "category": "external", "summary": "SUSE Bug 1222888 for CVE-2021-47205", "url": "https://bugzilla.suse.com/1222888" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47205" }, { "cve": "CVE-2021-47206", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47206" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: host: ohci-tmio: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47206", "url": "https://www.suse.com/security/cve/CVE-2021-47206" }, { "category": "external", "summary": "SUSE Bug 1222894 for CVE-2021-47206", "url": "https://bugzilla.suse.com/1222894" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47206" }, { "cve": "CVE-2021-47207", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47207" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: gus: fix null pointer dereference on pointer block\n\nThe pointer block return from snd_gf1_dma_next_block could be\nnull, so there is a potential null pointer dereference issue.\nFix this by adding a null check before dereference.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47207", "url": "https://www.suse.com/security/cve/CVE-2021-47207" }, { "category": "external", "summary": "SUSE Bug 1222790 for CVE-2021-47207", "url": "https://bugzilla.suse.com/1222790" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47207" }, { "cve": "CVE-2021-47209", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47209" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/fair: Prevent dead task groups from regaining cfs_rq\u0027s\n\nKevin is reporting crashes which point to a use-after-free of a cfs_rq\nin update_blocked_averages(). Initial debugging revealed that we\u0027ve\nlive cfs_rq\u0027s (on_list=1) in an about to be kfree()\u0027d task group in\nfree_fair_sched_group(). However, it was unclear how that can happen.\n\nHis kernel config happened to lead to a layout of struct sched_entity\nthat put the \u0027my_q\u0027 member directly into the middle of the object\nwhich makes it incidentally overlap with SLUB\u0027s freelist pointer.\nThat, in combination with SLAB_FREELIST_HARDENED\u0027s freelist pointer\nmangling, leads to a reliable access violation in form of a #GP which\nmade the UAF fail fast.\n\nMichal seems to have run into the same issue[1]. He already correctly\ndiagnosed that commit a7b359fc6a37 (\"sched/fair: Correctly insert\ncfs_rq\u0027s to list on unthrottle\") is causing the preconditions for the\nUAF to happen by re-adding cfs_rq\u0027s also to task groups that have no\nmore running tasks, i.e. also to dead ones. His analysis, however,\nmisses the real root cause and it cannot be seen from the crash\nbacktrace only, as the real offender is tg_unthrottle_up() getting\ncalled via sched_cfs_period_timer() via the timer interrupt at an\ninconvenient time.\n\nWhen unregister_fair_sched_group() unlinks all cfs_rq\u0027s from the dying\ntask group, it doesn\u0027t protect itself from getting interrupted. If the\ntimer interrupt triggers while we iterate over all CPUs or after\nunregister_fair_sched_group() has finished but prior to unlinking the\ntask group, sched_cfs_period_timer() will execute and walk the list of\ntask groups, trying to unthrottle cfs_rq\u0027s, i.e. re-add them to the\ndying task group. These will later -- in free_fair_sched_group() -- be\nkfree()\u0027ed while still being linked, leading to the fireworks Kevin\nand Michal are seeing.\n\nTo fix this race, ensure the dying task group gets unlinked first.\nHowever, simply switching the order of unregistering and unlinking the\ntask group isn\u0027t sufficient, as concurrent RCU walkers might still see\nit, as can be seen below:\n\n CPU1: CPU2:\n : timer IRQ:\n : do_sched_cfs_period_timer():\n : :\n : distribute_cfs_runtime():\n : rcu_read_lock();\n : :\n : unthrottle_cfs_rq():\n sched_offline_group(): :\n : walk_tg_tree_from(\u2026,tg_unthrottle_up,\u2026):\n list_del_rcu(\u0026tg-\u003elist); :\n (1) : list_for_each_entry_rcu(child, \u0026parent-\u003echildren, siblings)\n : :\n (2) list_del_rcu(\u0026tg-\u003esiblings); :\n : tg_unthrottle_up():\n unregister_fair_sched_group(): struct cfs_rq *cfs_rq = tg-\u003ecfs_rq[cpu_of(rq)];\n : :\n list_del_leaf_cfs_rq(tg-\u003ecfs_rq[cpu]); :\n : :\n : if (!cfs_rq_is_decayed(cfs_rq) || cfs_rq-\u003enr_running)\n (3) : list_add_leaf_cfs_rq(cfs_rq);\n : :\n : :\n : :\n : :\n : \n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47209", "url": "https://www.suse.com/security/cve/CVE-2021-47209" }, { "category": "external", "summary": "SUSE Bug 1222796 for CVE-2021-47209", "url": "https://bugzilla.suse.com/1222796" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47209" }, { "cve": "CVE-2021-47210", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47210" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tipd: Remove WARN_ON in tps6598x_block_read\n\nCalling tps6598x_block_read with a higher than allowed len can be\nhandled by just returning an error. There\u0027s no need to crash systems\nwith panic-on-warn enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47210", "url": "https://www.suse.com/security/cve/CVE-2021-47210" }, { "category": "external", "summary": "SUSE Bug 1222901 for CVE-2021-47210", "url": "https://bugzilla.suse.com/1222901" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47210" }, { "cve": "CVE-2021-47211", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47211" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: fix null pointer dereference on pointer cs_desc\n\nThe pointer cs_desc return from snd_usb_find_clock_source could\nbe null, so there is a potential null pointer dereference issue.\nFix this by adding a null check before dereference.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47211", "url": "https://www.suse.com/security/cve/CVE-2021-47211" }, { "category": "external", "summary": "SUSE Bug 1222869 for CVE-2021-47211", "url": "https://bugzilla.suse.com/1222869" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47211" }, { "cve": "CVE-2021-47212", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47212" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Update error handler for UCTX and UMEM\n\nIn the fast unload flow, the device state is set to internal error,\nwhich indicates that the driver started the destroy process.\nIn this case, when a destroy command is being executed, it should return\nMLX5_CMD_STAT_OK.\nFix MLX5_CMD_OP_DESTROY_UCTX and MLX5_CMD_OP_DESTROY_UMEM to return OK\ninstead of EIO.\n\nThis fixes a call trace in the umem release process -\n[ 2633.536695] Call Trace:\n[ 2633.537518] ib_uverbs_remove_one+0xc3/0x140 [ib_uverbs]\n[ 2633.538596] remove_client_context+0x8b/0xd0 [ib_core]\n[ 2633.539641] disable_device+0x8c/0x130 [ib_core]\n[ 2633.540615] __ib_unregister_device+0x35/0xa0 [ib_core]\n[ 2633.541640] ib_unregister_device+0x21/0x30 [ib_core]\n[ 2633.542663] __mlx5_ib_remove+0x38/0x90 [mlx5_ib]\n[ 2633.543640] auxiliary_bus_remove+0x1e/0x30 [auxiliary]\n[ 2633.544661] device_release_driver_internal+0x103/0x1f0\n[ 2633.545679] bus_remove_device+0xf7/0x170\n[ 2633.546640] device_del+0x181/0x410\n[ 2633.547606] mlx5_rescan_drivers_locked.part.10+0x63/0x160 [mlx5_core]\n[ 2633.548777] mlx5_unregister_device+0x27/0x40 [mlx5_core]\n[ 2633.549841] mlx5_uninit_one+0x21/0xc0 [mlx5_core]\n[ 2633.550864] remove_one+0x69/0xe0 [mlx5_core]\n[ 2633.551819] pci_device_remove+0x3b/0xc0\n[ 2633.552731] device_release_driver_internal+0x103/0x1f0\n[ 2633.553746] unbind_store+0xf6/0x130\n[ 2633.554657] kernfs_fop_write+0x116/0x190\n[ 2633.555567] vfs_write+0xa5/0x1a0\n[ 2633.556407] ksys_write+0x4f/0xb0\n[ 2633.557233] do_syscall_64+0x5b/0x1a0\n[ 2633.558071] entry_SYSCALL_64_after_hwframe+0x65/0xca\n[ 2633.559018] RIP: 0033:0x7f9977132648\n[ 2633.559821] Code: 89 02 48 c7 c0 ff ff ff ff eb b3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 8d 05 55 6f 2d 00 8b 00 85 c0 75 17 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 49 89 d4 55\n[ 2633.562332] RSP: 002b:00007fffb1a83888 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\n[ 2633.563472] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f9977132648\n[ 2633.564541] RDX: 000000000000000c RSI: 000055b90546e230 RDI: 0000000000000001\n[ 2633.565596] RBP: 000055b90546e230 R08: 00007f9977406860 R09: 00007f9977a54740\n[ 2633.566653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99774056e0\n[ 2633.567692] R13: 000000000000000c R14: 00007f9977400880 R15: 000000000000000c\n[ 2633.568725] ---[ end trace 10b4fe52945e544d ]---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47212", "url": "https://www.suse.com/security/cve/CVE-2021-47212" }, { "category": "external", "summary": "SUSE Bug 1222709 for CVE-2021-47212", "url": "https://bugzilla.suse.com/1222709" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47212" }, { "cve": "CVE-2021-47214", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47214" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlb, userfaultfd: fix reservation restore on userfaultfd error\n\nCurrently in the is_continue case in hugetlb_mcopy_atomic_pte(), if we\nbail out using \"goto out_release_unlock;\" in the cases where idx \u003e=\nsize, or !huge_pte_none(), the code will detect that new_pagecache_page\n== false, and so call restore_reserve_on_error(). In this case I see\nrestore_reserve_on_error() delete the reservation, and the following\ncall to remove_inode_hugepages() will increment h-\u003eresv_hugepages\ncausing a 100% reproducible leak.\n\nWe should treat the is_continue case similar to adding a page into the\npagecache and set new_pagecache_page to true, to indicate that there is\nno reservation to restore on the error path, and we need not call\nrestore_reserve_on_error(). Rename new_pagecache_page to\npage_in_pagecache to make that clear.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47214", "url": "https://www.suse.com/security/cve/CVE-2021-47214" }, { "category": "external", "summary": "SUSE Bug 1222710 for CVE-2021-47214", "url": "https://bugzilla.suse.com/1222710" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47214" }, { "cve": "CVE-2021-47215", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47215" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: kTLS, Fix crash in RX resync flow\n\nFor the TLS RX resync flow, we maintain a list of TLS contexts\nthat require some attention, to communicate their resync information\nto the HW.\nHere we fix list corruptions, by protecting the entries against\nmovements coming from resync_handle_seq_match(), until their resync\nhandling in napi is fully completed.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47215", "url": "https://www.suse.com/security/cve/CVE-2021-47215" }, { "category": "external", "summary": "SUSE Bug 1222704 for CVE-2021-47215", "url": "https://bugzilla.suse.com/1222704" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47215" }, { "cve": "CVE-2021-47216", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47216" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: advansys: Fix kernel pointer leak\n\nPointers should be printed with %p or %px rather than cast to \u0027unsigned\nlong\u0027 and printed with %lx.\n\nChange %lx to %p to print the hashed pointer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47216", "url": "https://www.suse.com/security/cve/CVE-2021-47216" }, { "category": "external", "summary": "SUSE Bug 1222876 for CVE-2021-47216", "url": "https://bugzilla.suse.com/1222876" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47216" }, { "cve": "CVE-2021-47217", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47217" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails\n\nCheck for a valid hv_vp_index array prior to derefencing hv_vp_index when\nsetting Hyper-V\u0027s TSC change callback. If Hyper-V setup failed in\nhyperv_init(), the kernel will still report that it\u0027s running under\nHyper-V, but will have silently disabled nearly all functionality.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000010\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: 0000 [#1] SMP\n CPU: 4 PID: 1 Comm: swapper/0 Not tainted 5.15.0-rc2+ #75\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:set_hv_tscchange_cb+0x15/0xa0\n Code: \u003c8b\u003e 04 82 8b 15 12 17 85 01 48 c1 e0 20 48 0d ee 00 01 00 f6 c6 08\n ...\n Call Trace:\n kvm_arch_init+0x17c/0x280\n kvm_init+0x31/0x330\n vmx_init+0xba/0x13a\n do_one_initcall+0x41/0x1c0\n kernel_init_freeable+0x1f2/0x23b\n kernel_init+0x16/0x120\n ret_from_fork+0x22/0x30", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47217", "url": "https://www.suse.com/security/cve/CVE-2021-47217" }, { "category": "external", "summary": "SUSE Bug 1222836 for CVE-2021-47217", "url": "https://bugzilla.suse.com/1222836" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47217" }, { "cve": "CVE-2021-47218", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47218" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: fix NULL-pointer dereference when hashtab allocation fails\n\nWhen the hash table slot array allocation fails in hashtab_init(),\nh-\u003esize is left initialized with a non-zero value, but the h-\u003ehtable\npointer is NULL. This may then cause a NULL pointer dereference, since\nthe policydb code relies on the assumption that even after a failed\nhashtab_init(), hashtab_map() and hashtab_destroy() can be safely called\non it. Yet, these detect an empty hashtab only by looking at the size.\n\nFix this by making sure that hashtab_init() always leaves behind a valid\nempty hashtab when the allocation fails.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47218", "url": "https://www.suse.com/security/cve/CVE-2021-47218" }, { "category": "external", "summary": "SUSE Bug 1222791 for CVE-2021-47218", "url": "https://bugzilla.suse.com/1222791" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47218" }, { "cve": "CVE-2021-47219", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-47219" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()\n\nThe following issue was observed running syzkaller:\n\nBUG: KASAN: slab-out-of-bounds in memcpy include/linux/string.h:377 [inline]\nBUG: KASAN: slab-out-of-bounds in sg_copy_buffer+0x150/0x1c0 lib/scatterlist.c:831\nRead of size 2132 at addr ffff8880aea95dc8 by task syz-executor.0/9815\n\nCPU: 0 PID: 9815 Comm: syz-executor.0 Not tainted 4.19.202-00874-gfc0fe04215a9 #2\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0xe4/0x14a lib/dump_stack.c:118\n print_address_description+0x73/0x280 mm/kasan/report.c:253\n kasan_report_error mm/kasan/report.c:352 [inline]\n kasan_report+0x272/0x370 mm/kasan/report.c:410\n memcpy+0x1f/0x50 mm/kasan/kasan.c:302\n memcpy include/linux/string.h:377 [inline]\n sg_copy_buffer+0x150/0x1c0 lib/scatterlist.c:831\n fill_from_dev_buffer+0x14f/0x340 drivers/scsi/scsi_debug.c:1021\n resp_report_tgtpgs+0x5aa/0x770 drivers/scsi/scsi_debug.c:1772\n schedule_resp+0x464/0x12f0 drivers/scsi/scsi_debug.c:4429\n scsi_debug_queuecommand+0x467/0x1390 drivers/scsi/scsi_debug.c:5835\n scsi_dispatch_cmd+0x3fc/0x9b0 drivers/scsi/scsi_lib.c:1896\n scsi_request_fn+0x1042/0x1810 drivers/scsi/scsi_lib.c:2034\n __blk_run_queue_uncond block/blk-core.c:464 [inline]\n __blk_run_queue+0x1a4/0x380 block/blk-core.c:484\n blk_execute_rq_nowait+0x1c2/0x2d0 block/blk-exec.c:78\n sg_common_write.isra.19+0xd74/0x1dc0 drivers/scsi/sg.c:847\n sg_write.part.23+0x6e0/0xd00 drivers/scsi/sg.c:716\n sg_write+0x64/0xa0 drivers/scsi/sg.c:622\n __vfs_write+0xed/0x690 fs/read_write.c:485\nkill_bdev:block_device:00000000e138492c\n vfs_write+0x184/0x4c0 fs/read_write.c:549\n ksys_write+0x107/0x240 fs/read_write.c:599\n do_syscall_64+0xc2/0x560 arch/x86/entry/common.c:293\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nWe get \u0027alen\u0027 from command its type is int. If userspace passes a large\nlength we will get a negative \u0027alen\u0027.\n\nSwitch n, alen, and rlen to u32.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-47219", "url": "https://www.suse.com/security/cve/CVE-2021-47219" }, { "category": "external", "summary": "SUSE Bug 1222824 for CVE-2021-47219", "url": "https://bugzilla.suse.com/1222824" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2021-47219" }, { "cve": "CVE-2022-48631", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48631" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix bug in extents parsing when eh_entries == 0 and eh_depth \u003e 0\n\nWhen walking through an inode extents, the ext4_ext_binsearch_idx() function\nassumes that the extent header has been previously validated. However, there\nare no checks that verify that the number of entries (eh-\u003eeh_entries) is\nnon-zero when depth is \u003e 0. And this will lead to problems because the\nEXT_FIRST_INDEX() and EXT_LAST_INDEX() will return garbage and result in this:\n\n[ 135.245946] ------------[ cut here ]------------\n[ 135.247579] kernel BUG at fs/ext4/extents.c:2258!\n[ 135.249045] invalid opcode: 0000 [#1] PREEMPT SMP\n[ 135.250320] CPU: 2 PID: 238 Comm: tmp118 Not tainted 5.19.0-rc8+ #4\n[ 135.252067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b-rebuilt.opensuse.org 04/01/2014\n[ 135.255065] RIP: 0010:ext4_ext_map_blocks+0xc20/0xcb0\n[ 135.256475] Code:\n[ 135.261433] RSP: 0018:ffffc900005939f8 EFLAGS: 00010246\n[ 135.262847] RAX: 0000000000000024 RBX: ffffc90000593b70 RCX: 0000000000000023\n[ 135.264765] RDX: ffff8880038e5f10 RSI: 0000000000000003 RDI: ffff8880046e922c\n[ 135.266670] RBP: ffff8880046e9348 R08: 0000000000000001 R09: ffff888002ca580c\n[ 135.268576] R10: 0000000000002602 R11: 0000000000000000 R12: 0000000000000024\n[ 135.270477] R13: 0000000000000000 R14: 0000000000000024 R15: 0000000000000000\n[ 135.272394] FS: 00007fdabdc56740(0000) GS:ffff88807dd00000(0000) knlGS:0000000000000000\n[ 135.274510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 135.276075] CR2: 00007ffc26bd4f00 CR3: 0000000006261004 CR4: 0000000000170ea0\n[ 135.277952] Call Trace:\n[ 135.278635] \u003cTASK\u003e\n[ 135.279247] ? preempt_count_add+0x6d/0xa0\n[ 135.280358] ? percpu_counter_add_batch+0x55/0xb0\n[ 135.281612] ? _raw_read_unlock+0x18/0x30\n[ 135.282704] ext4_map_blocks+0x294/0x5a0\n[ 135.283745] ? xa_load+0x6f/0xa0\n[ 135.284562] ext4_mpage_readpages+0x3d6/0x770\n[ 135.285646] read_pages+0x67/0x1d0\n[ 135.286492] ? folio_add_lru+0x51/0x80\n[ 135.287441] page_cache_ra_unbounded+0x124/0x170\n[ 135.288510] filemap_get_pages+0x23d/0x5a0\n[ 135.289457] ? path_openat+0xa72/0xdd0\n[ 135.290332] filemap_read+0xbf/0x300\n[ 135.291158] ? _raw_spin_lock_irqsave+0x17/0x40\n[ 135.292192] new_sync_read+0x103/0x170\n[ 135.293014] vfs_read+0x15d/0x180\n[ 135.293745] ksys_read+0xa1/0xe0\n[ 135.294461] do_syscall_64+0x3c/0x80\n[ 135.295284] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nThis patch simply adds an extra check in __ext4_ext_check(), verifying that\neh_entries is not 0 when eh_depth is \u003e 0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48631", "url": "https://www.suse.com/security/cve/CVE-2022-48631" }, { "category": "external", "summary": "SUSE Bug 1223475 for CVE-2022-48631", "url": "https://bugzilla.suse.com/1223475" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48631" }, { "cve": "CVE-2022-48632", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48632" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()\n\nmemcpy() is called in a loop while \u0027operation-\u003elength\u0027 upper bound\nis not checked and \u0027data_idx\u0027 also increments.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48632", "url": "https://www.suse.com/security/cve/CVE-2022-48632" }, { "category": "external", "summary": "SUSE Bug 1223481 for CVE-2022-48632", "url": "https://bugzilla.suse.com/1223481" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48632" }, { "cve": "CVE-2022-48634", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48634" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: Fix BUG: sleeping function called from invalid context errors\n\ngma_crtc_page_flip() was holding the event_lock spinlock while calling\ncrtc_funcs-\u003emode_set_base() which takes ww_mutex.\n\nThe only reason to hold event_lock is to clear gma_crtc-\u003epage_flip_event\non mode_set_base() errors.\n\nInstead unlock it after setting gma_crtc-\u003epage_flip_event and on\nerrors re-take the lock and clear gma_crtc-\u003epage_flip_event it\nit is still set.\n\nThis fixes the following WARN/stacktrace:\n\n[ 512.122953] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:870\n[ 512.123004] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1253, name: gnome-shell\n[ 512.123031] preempt_count: 1, expected: 0\n[ 512.123048] RCU nest depth: 0, expected: 0\n[ 512.123066] INFO: lockdep is turned off.\n[ 512.123080] irq event stamp: 0\n[ 512.123094] hardirqs last enabled at (0): [\u003c0000000000000000\u003e] 0x0\n[ 512.123134] hardirqs last disabled at (0): [\u003cffffffff8d0ec28c\u003e] copy_process+0x9fc/0x1de0\n[ 512.123176] softirqs last enabled at (0): [\u003cffffffff8d0ec28c\u003e] copy_process+0x9fc/0x1de0\n[ 512.123207] softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n[ 512.123233] Preemption disabled at:\n[ 512.123241] [\u003c0000000000000000\u003e] 0x0\n[ 512.123275] CPU: 3 PID: 1253 Comm: gnome-shell Tainted: G W 5.19.0+ #1\n[ 512.123304] Hardware name: Packard Bell dot s/SJE01_CT, BIOS V1.10 07/23/2013\n[ 512.123323] Call Trace:\n[ 512.123346] \u003cTASK\u003e\n[ 512.123370] dump_stack_lvl+0x5b/0x77\n[ 512.123412] __might_resched.cold+0xff/0x13a\n[ 512.123458] ww_mutex_lock+0x1e/0xa0\n[ 512.123495] psb_gem_pin+0x2c/0x150 [gma500_gfx]\n[ 512.123601] gma_pipe_set_base+0x76/0x240 [gma500_gfx]\n[ 512.123708] gma_crtc_page_flip+0x95/0x130 [gma500_gfx]\n[ 512.123808] drm_mode_page_flip_ioctl+0x57d/0x5d0\n[ 512.123897] ? drm_mode_cursor2_ioctl+0x10/0x10\n[ 512.123936] drm_ioctl_kernel+0xa1/0x150\n[ 512.123984] drm_ioctl+0x21f/0x420\n[ 512.124025] ? drm_mode_cursor2_ioctl+0x10/0x10\n[ 512.124070] ? rcu_read_lock_bh_held+0xb/0x60\n[ 512.124104] ? lock_release+0x1ef/0x2d0\n[ 512.124161] __x64_sys_ioctl+0x8d/0xd0\n[ 512.124203] do_syscall_64+0x58/0x80\n[ 512.124239] ? do_syscall_64+0x67/0x80\n[ 512.124267] ? trace_hardirqs_on_prepare+0x55/0xe0\n[ 512.124300] ? do_syscall_64+0x67/0x80\n[ 512.124340] ? rcu_read_lock_sched_held+0x10/0x80\n[ 512.124377] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n[ 512.124411] RIP: 0033:0x7fcc4a70740f\n[ 512.124442] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 \u003c89\u003e c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00\n[ 512.124470] RSP: 002b:00007ffda73f5390 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n[ 512.124503] RAX: ffffffffffffffda RBX: 000055cc9e474500 RCX: 00007fcc4a70740f\n[ 512.124524] RDX: 00007ffda73f5420 RSI: 00000000c01864b0 RDI: 0000000000000009\n[ 512.124544] RBP: 00007ffda73f5420 R08: 000055cc9c0b0cb0 R09: 0000000000000034\n[ 512.124564] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000c01864b0\n[ 512.124584] R13: 0000000000000009 R14: 000055cc9df484d0 R15: 000055cc9af5d0c0\n[ 512.124647] \u003c/TASK\u003e", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48634", "url": "https://www.suse.com/security/cve/CVE-2022-48634" }, { "category": "external", "summary": "SUSE Bug 1223501 for CVE-2022-48634", "url": "https://bugzilla.suse.com/1223501" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48634" }, { "cve": "CVE-2022-48636", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48636" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup\n\nFix Oops in dasd_alias_get_start_dev() function caused by the pavgroup\npointer being NULL.\n\nThe pavgroup pointer is checked on the entrance of the function but\nwithout the lcu-\u003elock being held. Therefore there is a race window\nbetween dasd_alias_get_start_dev() and _lcu_update() which sets\npavgroup to NULL with the lcu-\u003elock held.\n\nFix by checking the pavgroup pointer with lcu-\u003elock held.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48636", "url": "https://www.suse.com/security/cve/CVE-2022-48636" }, { "category": "external", "summary": "SUSE Bug 1223512 for CVE-2022-48636", "url": "https://bugzilla.suse.com/1223512" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48636" }, { "cve": "CVE-2022-48637", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48637" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt: prevent skb UAF after handing over to PTP worker\n\nWhen reading the timestamp is required bnxt_tx_int() hands\nover the ownership of the completed skb to the PTP worker.\nThe skb should not be used afterwards, as the worker may\nrun before the rest of our code and free the skb, leading\nto a use-after-free.\n\nSince dev_kfree_skb_any() accepts NULL make the loss of\nownership more obvious and set skb to NULL.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48637", "url": "https://www.suse.com/security/cve/CVE-2022-48637" }, { "category": "external", "summary": "SUSE Bug 1223517 for CVE-2022-48637", "url": "https://bugzilla.suse.com/1223517" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48637" }, { "cve": "CVE-2022-48638", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48638" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: cgroup_get_from_id() must check the looked-up kn is a directory\n\ncgroup has to be one kernfs dir, otherwise kernel panic is caused,\nespecially cgroup id is provide from userspace.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48638", "url": "https://www.suse.com/security/cve/CVE-2022-48638" }, { "category": "external", "summary": "SUSE Bug 1223522 for CVE-2022-48638", "url": "https://bugzilla.suse.com/1223522" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48638" }, { "cve": "CVE-2022-48639", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48639" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix possible refcount leak in tc_new_tfilter()\n\ntfilter_put need to be called to put the refount got by tp-\u003eops-\u003eget to\navoid possible refcount leak when chain-\u003etmplt_ops != NULL and\nchain-\u003etmplt_ops != tp-\u003eops.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48639", "url": "https://www.suse.com/security/cve/CVE-2022-48639" }, { "category": "external", "summary": "SUSE Bug 1223490 for CVE-2022-48639", "url": "https://bugzilla.suse.com/1223490" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48639" }, { "cve": "CVE-2022-48640", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48640" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: fix NULL deref in bond_rr_gen_slave_id\n\nFix a NULL dereference of the struct bonding.rr_tx_counter member because\nif a bond is initially created with an initial mode != zero (Round Robin)\nthe memory required for the counter is never created and when the mode is\nchanged there is never any attempt to verify the memory is allocated upon\nswitching modes.\n\nThis causes the following Oops on an aarch64 machine:\n [ 334.686773] Unable to handle kernel paging request at virtual address ffff2c91ac905000\n [ 334.694703] Mem abort info:\n [ 334.697486] ESR = 0x0000000096000004\n [ 334.701234] EC = 0x25: DABT (current EL), IL = 32 bits\n [ 334.706536] SET = 0, FnV = 0\n [ 334.709579] EA = 0, S1PTW = 0\n [ 334.712719] FSC = 0x04: level 0 translation fault\n [ 334.717586] Data abort info:\n [ 334.720454] ISV = 0, ISS = 0x00000004\n [ 334.724288] CM = 0, WnR = 0\n [ 334.727244] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000008044d662000\n [ 334.733944] [ffff2c91ac905000] pgd=0000000000000000, p4d=0000000000000000\n [ 334.740734] Internal error: Oops: 96000004 [#1] SMP\n [ 334.745602] Modules linked in: bonding tls veth rfkill sunrpc arm_spe_pmu vfat fat acpi_ipmi ipmi_ssif ixgbe igb i40e mdio ipmi_devintf ipmi_msghandler arm_cmn arm_dsu_pmu cppc_cpufreq acpi_tad fuse zram crct10dif_ce ast ghash_ce sbsa_gwdt nvme drm_vram_helper drm_ttm_helper nvme_core ttm xgene_hwmon\n [ 334.772217] CPU: 7 PID: 2214 Comm: ping Not tainted 6.0.0-rc4-00133-g64ae13ed4784 #4\n [ 334.779950] Hardware name: GIGABYTE R272-P31-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021\n [ 334.789244] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n [ 334.796196] pc : bond_rr_gen_slave_id+0x40/0x124 [bonding]\n [ 334.801691] lr : bond_xmit_roundrobin_slave_get+0x38/0xdc [bonding]\n [ 334.807962] sp : ffff8000221733e0\n [ 334.811265] x29: ffff8000221733e0 x28: ffffdbac8572d198 x27: ffff80002217357c\n [ 334.818392] x26: 000000000000002a x25: ffffdbacb33ee000 x24: ffff07ff980fa000\n [ 334.825519] x23: ffffdbacb2e398ba x22: ffff07ff98102000 x21: ffff07ff981029c0\n [ 334.832646] x20: 0000000000000001 x19: ffff07ff981029c0 x18: 0000000000000014\n [ 334.839773] x17: 0000000000000000 x16: ffffdbacb1004364 x15: 0000aaaabe2f5a62\n [ 334.846899] x14: ffff07ff8e55d968 x13: ffff07ff8e55db30 x12: 0000000000000000\n [ 334.854026] x11: ffffdbacb21532e8 x10: 0000000000000001 x9 : ffffdbac857178ec\n [ 334.861153] x8 : ffff07ff9f6e5a28 x7 : 0000000000000000 x6 : 000000007c2b3742\n [ 334.868279] x5 : ffff2c91ac905000 x4 : ffff2c91ac905000 x3 : ffff07ff9f554400\n [ 334.875406] x2 : ffff2c91ac905000 x1 : 0000000000000001 x0 : ffff07ff981029c0\n [ 334.882532] Call trace:\n [ 334.884967] bond_rr_gen_slave_id+0x40/0x124 [bonding]\n [ 334.890109] bond_xmit_roundrobin_slave_get+0x38/0xdc [bonding]\n [ 334.896033] __bond_start_xmit+0x128/0x3a0 [bonding]\n [ 334.901001] bond_start_xmit+0x54/0xb0 [bonding]\n [ 334.905622] dev_hard_start_xmit+0xb4/0x220\n [ 334.909798] __dev_queue_xmit+0x1a0/0x720\n [ 334.913799] arp_xmit+0x3c/0xbc\n [ 334.916932] arp_send_dst+0x98/0xd0\n [ 334.920410] arp_solicit+0xe8/0x230\n [ 334.923888] neigh_probe+0x60/0xb0\n [ 334.927279] __neigh_event_send+0x3b0/0x470\n [ 334.931453] neigh_resolve_output+0x70/0x90\n [ 334.935626] ip_finish_output2+0x158/0x514\n [ 334.939714] __ip_finish_output+0xac/0x1a4\n [ 334.943800] ip_finish_output+0x40/0xfc\n [ 334.947626] ip_output+0xf8/0x1a4\n [ 334.950931] ip_send_skb+0x5c/0x100\n [ 334.954410] ip_push_pending_frames+0x3c/0x60\n [ 334.958758] raw_sendmsg+0x458/0x6d0\n [ 334.962325] inet_sendmsg+0x50/0x80\n [ 334.965805] sock_sendmsg+0x60/0x6c\n [ 334.969286] __sys_sendto+0xc8/0x134\n [ 334.972853] __arm64_sys_sendto+0x34/0x4c\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48640", "url": "https://www.suse.com/security/cve/CVE-2022-48640" }, { "category": "external", "summary": "SUSE Bug 1223499 for CVE-2022-48640", "url": "https://bugzilla.suse.com/1223499" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48640" }, { "cve": "CVE-2022-48642", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48642" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()\n\nIt seems to me that percpu memory for chain stats started leaking since\ncommit 3bc158f8d0330f0a (\"netfilter: nf_tables: map basechain priority to\nhardware priority\") when nft_chain_offload_priority() returned an error.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48642", "url": "https://www.suse.com/security/cve/CVE-2022-48642" }, { "category": "external", "summary": "SUSE Bug 1223478 for CVE-2022-48642", "url": "https://bugzilla.suse.com/1223478" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48642" }, { "cve": "CVE-2022-48644", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48644" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: taprio: avoid disabling offload when it was never enabled\n\nIn an incredibly strange API design decision, qdisc-\u003edestroy() gets\ncalled even if qdisc-\u003einit() never succeeded, not exclusively since\ncommit 87b60cfacf9f (\"net_sched: fix error recovery at qdisc creation\"),\nbut apparently also earlier (in the case of qdisc_create_dflt()).\n\nThe taprio qdisc does not fully acknowledge this when it attempts full\noffload, because it starts off with q-\u003eflags = TAPRIO_FLAGS_INVALID in\ntaprio_init(), then it replaces q-\u003eflags with TCA_TAPRIO_ATTR_FLAGS\nparsed from netlink (in taprio_change(), tail called from taprio_init()).\n\nBut in taprio_destroy(), we call taprio_disable_offload(), and this\ndetermines what to do based on FULL_OFFLOAD_IS_ENABLED(q-\u003eflags).\n\nBut looking at the implementation of FULL_OFFLOAD_IS_ENABLED()\n(a bitwise check of bit 1 in q-\u003eflags), it is invalid to call this macro\non q-\u003eflags when it contains TAPRIO_FLAGS_INVALID, because that is set\nto U32_MAX, and therefore FULL_OFFLOAD_IS_ENABLED() will return true on\nan invalid set of flags.\n\nAs a result, it is possible to crash the kernel if user space forces an\nerror between setting q-\u003eflags = TAPRIO_FLAGS_INVALID, and the calling\nof taprio_enable_offload(). This is because drivers do not expect the\noffload to be disabled when it was never enabled.\n\nThe error that we force here is to attach taprio as a non-root qdisc,\nbut instead as child of an mqprio root qdisc:\n\n$ tc qdisc add dev swp0 root handle 1: \\\n\tmqprio num_tc 8 map 0 1 2 3 4 5 6 7 \\\n\tqueues 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 hw 0\n$ tc qdisc replace dev swp0 parent 1:1 \\\n\ttaprio num_tc 8 map 0 1 2 3 4 5 6 7 \\\n\tqueues 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 base-time 0 \\\n\tsched-entry S 0x7f 990000 sched-entry S 0x80 100000 \\\n\tflags 0x0 clockid CLOCK_TAI\nUnable to handle kernel paging request at virtual address fffffffffffffff8\n[fffffffffffffff8] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 96000004 [#1] PREEMPT SMP\nCall trace:\n taprio_dump+0x27c/0x310\n vsc9959_port_setup_tc+0x1f4/0x460\n felix_port_setup_tc+0x24/0x3c\n dsa_slave_setup_tc+0x54/0x27c\n taprio_disable_offload.isra.0+0x58/0xe0\n taprio_destroy+0x80/0x104\n qdisc_create+0x240/0x470\n tc_modify_qdisc+0x1fc/0x6b0\n rtnetlink_rcv_msg+0x12c/0x390\n netlink_rcv_skb+0x5c/0x130\n rtnetlink_rcv+0x1c/0x2c\n\nFix this by keeping track of the operations we made, and undo the\noffload only if we actually did it.\n\nI\u0027ve added \"bool offloaded\" inside a 4 byte hole between \"int clockid\"\nand \"atomic64_t picos_per_byte\". Now the first cache line looks like\nbelow:\n\n$ pahole -C taprio_sched net/sched/sch_taprio.o\nstruct taprio_sched {\n struct Qdisc * * qdiscs; /* 0 8 */\n struct Qdisc * root; /* 8 8 */\n u32 flags; /* 16 4 */\n enum tk_offsets tk_offset; /* 20 4 */\n int clockid; /* 24 4 */\n bool offloaded; /* 28 1 */\n\n /* XXX 3 bytes hole, try to pack */\n\n atomic64_t picos_per_byte; /* 32 0 */\n\n /* XXX 8 bytes hole, try to pack */\n\n spinlock_t current_entry_lock; /* 40 0 */\n\n /* XXX 8 bytes hole, try to pack */\n\n struct sched_entry * current_entry; /* 48 8 */\n struct sched_gate_list * oper_sched; /* 56 8 */\n /* --- cacheline 1 boundary (64 bytes) --- */", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48644", "url": "https://www.suse.com/security/cve/CVE-2022-48644" }, { "category": "external", "summary": "SUSE Bug 1223511 for CVE-2022-48644", "url": "https://bugzilla.suse.com/1223511" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48644" }, { "cve": "CVE-2022-48646", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48646" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc/siena: fix null pointer dereference in efx_hard_start_xmit\n\nLike in previous patch for sfc, prevent potential (but unlikely) NULL\npointer dereference.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48646", "url": "https://www.suse.com/security/cve/CVE-2022-48646" }, { "category": "external", "summary": "SUSE Bug 1223502 for CVE-2022-48646", "url": "https://bugzilla.suse.com/1223502" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48646" }, { "cve": "CVE-2022-48647", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48647" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix TX channel offset when using legacy interrupts\n\nIn legacy interrupt mode the tx_channel_offset was hardcoded to 1, but\nthat\u0027s not correct if efx_sepparate_tx_channels is false. In that case,\nthe offset is 0 because the tx queues are in the single existing channel\nat index 0, together with the rx queue.\n\nWithout this fix, as soon as you try to send any traffic, it tries to\nget the tx queues from an uninitialized channel getting these errors:\n WARNING: CPU: 1 PID: 0 at drivers/net/ethernet/sfc/tx.c:540 efx_hard_start_xmit+0x12e/0x170 [sfc]\n [...]\n RIP: 0010:efx_hard_start_xmit+0x12e/0x170 [sfc]\n [...]\n Call Trace:\n \u003cIRQ\u003e\n dev_hard_start_xmit+0xd7/0x230\n sch_direct_xmit+0x9f/0x360\n __dev_queue_xmit+0x890/0xa40\n [...]\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000020\n [...]\n RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]\n [...]\n Call Trace:\n \u003cIRQ\u003e\n dev_hard_start_xmit+0xd7/0x230\n sch_direct_xmit+0x9f/0x360\n __dev_queue_xmit+0x890/0xa40\n [...]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48647", "url": "https://www.suse.com/security/cve/CVE-2022-48647" }, { "category": "external", "summary": "SUSE Bug 1223519 for CVE-2022-48647", "url": "https://bugzilla.suse.com/1223519" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48647" }, { "cve": "CVE-2022-48648", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48648" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix null pointer dereference in efx_hard_start_xmit\n\nTrying to get the channel from the tx_queue variable here is wrong\nbecause we can only be here if tx_queue is NULL, so we shouldn\u0027t\ndereference it. As the above comment in the code says, this is very\nunlikely to happen, but it\u0027s wrong anyway so let\u0027s fix it.\n\nI hit this issue because of a different bug that caused tx_queue to be\nNULL. If that happens, this is the error message that we get here:\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000020\n [...]\n RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48648", "url": "https://www.suse.com/security/cve/CVE-2022-48648" }, { "category": "external", "summary": "SUSE Bug 1223503 for CVE-2022-48648", "url": "https://bugzilla.suse.com/1223503" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48648" }, { "cve": "CVE-2022-48650", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48650" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()\n\nCommit 8f394da36a36 (\"scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG\")\nmade the __qlt_24xx_handle_abts() function return early if\ntcm_qla2xxx_find_cmd_by_tag() didn\u0027t find a command, but it missed to clean\nup the allocated memory for the management command.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48650", "url": "https://www.suse.com/security/cve/CVE-2022-48650" }, { "category": "external", "summary": "SUSE Bug 1223509 for CVE-2022-48650", "url": "https://bugzilla.suse.com/1223509" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48650" }, { "cve": "CVE-2022-48651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48651" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix out-of-bound bugs caused by unset skb-\u003emac_header\n\nIf an AF_PACKET socket is used to send packets through ipvlan and the\ndefault xmit function of the AF_PACKET socket is changed from\ndev_queue_xmit() to packet_direct_xmit() via setsockopt() with the option\nname of PACKET_QDISC_BYPASS, the skb-\u003emac_header may not be reset and\nremains as the initial value of 65535, this may trigger slab-out-of-bounds\nbugs as following:\n\n=================================================================\nUG: KASAN: slab-out-of-bounds in ipvlan_xmit_mode_l2+0xdb/0x330 [ipvlan]\nPU: 2 PID: 1768 Comm: raw_send Kdump: loaded Not tainted 6.0.0-rc4+ #6\nardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33\nall Trace:\nprint_address_description.constprop.0+0x1d/0x160\nprint_report.cold+0x4f/0x112\nkasan_report+0xa3/0x130\nipvlan_xmit_mode_l2+0xdb/0x330 [ipvlan]\nipvlan_start_xmit+0x29/0xa0 [ipvlan]\n__dev_direct_xmit+0x2e2/0x380\npacket_direct_xmit+0x22/0x60\npacket_snd+0x7c9/0xc40\nsock_sendmsg+0x9a/0xa0\n__sys_sendto+0x18a/0x230\n__x64_sys_sendto+0x74/0x90\ndo_syscall_64+0x3b/0x90\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe root cause is:\n 1. packet_snd() only reset skb-\u003emac_header when sock-\u003etype is SOCK_RAW\n and skb-\u003eprotocol is not specified as in packet_parse_headers()\n\n 2. packet_direct_xmit() doesn\u0027t reset skb-\u003emac_header as dev_queue_xmit()\n\nIn this case, skb-\u003emac_header is 65535 when ipvlan_xmit_mode_l2() is\ncalled. So when ipvlan_xmit_mode_l2() gets mac header with eth_hdr() which\nuse \"skb-\u003ehead + skb-\u003emac_header\", out-of-bound access occurs.\n\nThis patch replaces eth_hdr() with skb_eth_hdr() in ipvlan_xmit_mode_l2()\nand reset mac header in multicast to solve this out-of-bound bug.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48651", "url": "https://www.suse.com/security/cve/CVE-2022-48651" }, { "category": "external", "summary": "SUSE Bug 1223513 for CVE-2022-48651", "url": "https://bugzilla.suse.com/1223513" }, { "category": "external", "summary": "SUSE Bug 1223514 for CVE-2022-48651", "url": "https://bugzilla.suse.com/1223514" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2022-48651" }, { "cve": "CVE-2022-48652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48652" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix crash by keep old cfg when update TCs more than queues\n\nThere are problems if allocated queues less than Traffic Classes.\n\nCommit a632b2a4c920 (\"ice: ethtool: Prohibit improper channel config\nfor DCB\") already disallow setting less queues than TCs.\n\nAnother case is if we first set less queues, and later update more TCs\nconfig due to LLDP, ice_vsi_cfg_tc() will failed but left dirty\nnum_txq/rxq and tc_cfg in vsi, that will cause invalid pointer access.\n\n[ 95.968089] ice 0000:3b:00.1: More TCs defined than queues/rings allocated.\n[ 95.968092] ice 0000:3b:00.1: Trying to use more Rx queues (8), than were allocated (1)!\n[ 95.968093] ice 0000:3b:00.1: Failed to config TC for VSI index: 0\n[ 95.969621] general protection fault: 0000 [#1] SMP NOPTI\n[ 95.969705] CPU: 1 PID: 58405 Comm: lldpad Kdump: loaded Tainted: G U W O --------- -t - 4.18.0 #1\n[ 95.969867] Hardware name: O.E.M/BC11SPSCB10, BIOS 8.23 12/30/2021\n[ 95.969992] RIP: 0010:devm_kmalloc+0xa/0x60\n[ 95.970052] Code: 5c ff ff ff 31 c0 5b 5d 41 5c c3 b8 f4 ff ff ff eb f4 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 89 d1 \u003c8b\u003e 97 60 02 00 00 48 8d 7e 18 48 39 f7 72 3f 55 89 ce 53 48 8b 4c\n[ 95.970344] RSP: 0018:ffffc9003f553888 EFLAGS: 00010206\n[ 95.970425] RAX: dead000000000200 RBX: ffffea003c425b00 RCX: 00000000006080c0\n[ 95.970536] RDX: 00000000006080c0 RSI: 0000000000000200 RDI: dead000000000200\n[ 95.970648] RBP: dead000000000200 R08: 00000000000463c0 R09: ffff888ffa900000\n[ 95.970760] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888ff6b40100\n[ 95.970870] R13: ffff888ff6a55018 R14: 0000000000000000 R15: ffff888ff6a55460\n[ 95.970981] FS: 00007f51b7d24700(0000) GS:ffff88903ee80000(0000) knlGS:0000000000000000\n[ 95.971108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 95.971197] CR2: 00007fac5410d710 CR3: 0000000f2c1de002 CR4: 00000000007606e0\n[ 95.971309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 95.971419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 95.971530] PKRU: 55555554\n[ 95.971573] Call Trace:\n[ 95.971622] ice_setup_rx_ring+0x39/0x110 [ice]\n[ 95.971695] ice_vsi_setup_rx_rings+0x54/0x90 [ice]\n[ 95.971774] ice_vsi_open+0x25/0x120 [ice]\n[ 95.971843] ice_open_internal+0xb8/0x1f0 [ice]\n[ 95.971919] ice_ena_vsi+0x4f/0xd0 [ice]\n[ 95.971987] ice_dcb_ena_dis_vsi.constprop.5+0x29/0x90 [ice]\n[ 95.972082] ice_pf_dcb_cfg+0x29a/0x380 [ice]\n[ 95.972154] ice_dcbnl_setets+0x174/0x1b0 [ice]\n[ 95.972220] dcbnl_ieee_set+0x89/0x230\n[ 95.972279] ? dcbnl_ieee_del+0x150/0x150\n[ 95.972341] dcb_doit+0x124/0x1b0\n[ 95.972392] rtnetlink_rcv_msg+0x243/0x2f0\n[ 95.972457] ? dcb_doit+0x14d/0x1b0\n[ 95.972510] ? __kmalloc_node_track_caller+0x1d3/0x280\n[ 95.972591] ? rtnl_calcit.isra.31+0x100/0x100\n[ 95.972661] netlink_rcv_skb+0xcf/0xf0\n[ 95.972720] netlink_unicast+0x16d/0x220\n[ 95.972781] netlink_sendmsg+0x2ba/0x3a0\n[ 95.975891] sock_sendmsg+0x4c/0x50\n[ 95.979032] ___sys_sendmsg+0x2e4/0x300\n[ 95.982147] ? kmem_cache_alloc+0x13e/0x190\n[ 95.985242] ? __wake_up_common_lock+0x79/0x90\n[ 95.988338] ? __check_object_size+0xac/0x1b0\n[ 95.991440] ? _copy_to_user+0x22/0x30\n[ 95.994539] ? move_addr_to_user+0xbb/0xd0\n[ 95.997619] ? __sys_sendmsg+0x53/0x80\n[ 96.000664] __sys_sendmsg+0x53/0x80\n[ 96.003747] do_syscall_64+0x5b/0x1d0\n[ 96.006862] entry_SYSCALL_64_after_hwframe+0x65/0xca\n\nOnly update num_txq/rxq when passed check, and restore tc_cfg if setup\nqueue map failed.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48652", "url": "https://www.suse.com/security/cve/CVE-2022-48652" }, { "category": "external", "summary": "SUSE Bug 1223520 for CVE-2022-48652", "url": "https://bugzilla.suse.com/1223520" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48652" }, { "cve": "CVE-2022-48653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48653" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Don\u0027t double unplug aux on peer initiated reset\n\nIn the IDC callback that is accessed when the aux drivers request a reset,\nthe function to unplug the aux devices is called. This function is also\ncalled in the ice_prepare_for_reset function. This double call is causing\na \"scheduling while atomic\" BUG.\n\n[ 662.676430] ice 0000:4c:00.0 rocep76s0: cqp opcode = 0x1 maj_err_code = 0xffff min_err_code = 0x8003\n\n[ 662.676609] ice 0000:4c:00.0 rocep76s0: [Modify QP Cmd Error][op_code=8] status=-29 waiting=1 completion_err=1 maj=0xffff min=0x8003\n\n[ 662.815006] ice 0000:4c:00.0 rocep76s0: ICE OICR event notification: oicr = 0x10000003\n\n[ 662.815014] ice 0000:4c:00.0 rocep76s0: critical PE Error, GLPE_CRITERR=0x00011424\n\n[ 662.815017] ice 0000:4c:00.0 rocep76s0: Requesting a reset\n\n[ 662.815475] BUG: scheduling while atomic: swapper/37/0/0x00010002\n\n[ 662.815475] BUG: scheduling while atomic: swapper/37/0/0x00010002\n[ 662.815477] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs rfkill 8021q garp mrp stp llc vfat fat rpcrdma intel_rapl_msr intel_rapl_common sunrpc i10nm_edac rdma_ucm nfit ib_srpt libnvdimm ib_isert iscsi_target_mod x86_pkg_temp_thermal intel_powerclamp coretemp target_core_mod snd_hda_intel ib_iser snd_intel_dspcfg libiscsi snd_intel_sdw_acpi scsi_transport_iscsi kvm_intel iTCO_wdt rdma_cm snd_hda_codec kvm iw_cm ipmi_ssif iTCO_vendor_support snd_hda_core irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel snd_hwdep snd_seq snd_seq_device rapl snd_pcm snd_timer isst_if_mbox_pci pcspkr isst_if_mmio irdma intel_uncore idxd acpi_ipmi joydev isst_if_common snd mei_me idxd_bus ipmi_si soundcore i2c_i801 mei ipmi_devintf i2c_smbus i2c_ismt ipmi_msghandler acpi_power_meter acpi_pad rv(OE) ib_uverbs ib_cm ib_core xfs libcrc32c ast i2c_algo_bit drm_vram_helper drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops drm_ttm_helpe\n r ttm\n[ 662.815546] nvme nvme_core ice drm crc32c_intel i40e t10_pi wmi pinctrl_emmitsburg dm_mirror dm_region_hash dm_log dm_mod fuse\n[ 662.815557] Preemption disabled at:\n[ 662.815558] [\u003c0000000000000000\u003e] 0x0\n[ 662.815563] CPU: 37 PID: 0 Comm: swapper/37 Kdump: loaded Tainted: G S OE 5.17.1 #2\n[ 662.815566] Hardware name: Intel Corporation D50DNP/D50DNP, BIOS SE5C6301.86B.6624.D18.2111021741 11/02/2021\n[ 662.815568] Call Trace:\n[ 662.815572] \u003cIRQ\u003e\n[ 662.815574] dump_stack_lvl+0x33/0x42\n[ 662.815581] __schedule_bug.cold.147+0x7d/0x8a\n[ 662.815588] __schedule+0x798/0x990\n[ 662.815595] schedule+0x44/0xc0\n[ 662.815597] schedule_preempt_disabled+0x14/0x20\n[ 662.815600] __mutex_lock.isra.11+0x46c/0x490\n[ 662.815603] ? __ibdev_printk+0x76/0xc0 [ib_core]\n[ 662.815633] device_del+0x37/0x3d0\n[ 662.815639] ice_unplug_aux_dev+0x1a/0x40 [ice]\n[ 662.815674] ice_schedule_reset+0x3c/0xd0 [ice]\n[ 662.815693] irdma_iidc_event_handler.cold.7+0xb6/0xd3 [irdma]\n[ 662.815712] ? bitmap_find_next_zero_area_off+0x45/0xa0\n[ 662.815719] ice_send_event_to_aux+0x54/0x70 [ice]\n[ 662.815741] ice_misc_intr+0x21d/0x2d0 [ice]\n[ 662.815756] __handle_irq_event_percpu+0x4c/0x180\n[ 662.815762] handle_irq_event_percpu+0xf/0x40\n[ 662.815764] handle_irq_event+0x34/0x60\n[ 662.815766] handle_edge_irq+0x9a/0x1c0\n[ 662.815770] __common_interrupt+0x62/0x100\n[ 662.815774] common_interrupt+0xb4/0xd0\n[ 662.815779] \u003c/IRQ\u003e\n[ 662.815780] \u003cTASK\u003e\n[ 662.815780] asm_common_interrupt+0x1e/0x40\n[ 662.815785] RIP: 0010:cpuidle_enter_state+0xd6/0x380\n[ 662.815789] Code: 49 89 c4 0f 1f 44 00 00 31 ff e8 65 d7 95 ff 45 84 ff 74 12 9c 58 f6 c4 02 0f 85 64 02 00 00 31 ff e8 ae c5 9c ff fb 45 85 f6 \u003c0f\u003e 88 12 01 00 00 49 63 d6 4c 2b 24 24 48 8d 04 52 48 8d 04 82 49\n[ 662.815791] RSP: 0018:ff2c2c4f18edbe80 EFLAGS: 00000202\n[ 662.815793] RAX: ff280805df140000 RBX: 0000000000000002 RCX: 000000000000001f\n[ 662.815795] RDX: 0000009a52da2d08 R\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48653", "url": "https://www.suse.com/security/cve/CVE-2022-48653" }, { "category": "external", "summary": "SUSE Bug 1223474 for CVE-2022-48653", "url": "https://bugzilla.suse.com/1223474" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48653" }, { "cve": "CVE-2022-48654", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48654" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()\n\nnf_osf_find() incorrectly returns true on mismatch, this leads to\ncopying uninitialized memory area in nft_osf which can be used to leak\nstale kernel stack data to userspace.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48654", "url": "https://www.suse.com/security/cve/CVE-2022-48654" }, { "category": "external", "summary": "SUSE Bug 1223482 for CVE-2022-48654", "url": "https://bugzilla.suse.com/1223482" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48654" }, { "cve": "CVE-2022-48655", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48655" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Harden accesses to the reset domains\n\nAccessing reset domains descriptors by the index upon the SCMI drivers\nrequests through the SCMI reset operations interface can potentially\nlead to out-of-bound violations if the SCMI driver misbehave.\n\nAdd an internal consistency check before any such domains descriptors\naccesses.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48655", "url": "https://www.suse.com/security/cve/CVE-2022-48655" }, { "category": "external", "summary": "SUSE Bug 1223477 for CVE-2022-48655", "url": "https://bugzilla.suse.com/1223477" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48655" }, { "cve": "CVE-2022-48656", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48656" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()\n\nWe should call of_node_put() for the reference returned by\nof_parse_phandle() in fail path or when it is not used anymore.\nHere we only need to move the of_node_put() before the check.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48656", "url": "https://www.suse.com/security/cve/CVE-2022-48656" }, { "category": "external", "summary": "SUSE Bug 1223479 for CVE-2022-48656", "url": "https://bugzilla.suse.com/1223479" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48656" }, { "cve": "CVE-2022-48657", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48657" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: topology: fix possible overflow in amu_fie_setup()\n\ncpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*,\nwhile freq_inv_set_max_ratio() gets passed this frequency in Hz as \u0027u64\u0027.\nMultiplying max frequency by 1000 can potentially result in overflow --\nmultiplying by 1000ULL instead should avoid that...\n\nFound by Linux Verification Center (linuxtesting.org) with the SVACE static\nanalysis tool.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48657", "url": "https://www.suse.com/security/cve/CVE-2022-48657" }, { "category": "external", "summary": "SUSE Bug 1223484 for CVE-2022-48657", "url": "https://bugzilla.suse.com/1223484" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48657" }, { "cve": "CVE-2022-48658", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48658" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.\n\nCommit 5a836bf6b09f (\"mm: slub: move flush_cpu_slab() invocations\n__free_slab() invocations out of IRQ context\") moved all flush_cpu_slab()\ninvocations to the global workqueue to avoid a problem related\nwith deactivate_slab()/__free_slab() being called from an IRQ context\non PREEMPT_RT kernels.\n\nWhen the flush_all_cpu_locked() function is called from a task context\nit may happen that a workqueue with WQ_MEM_RECLAIM bit set ends up\nflushing the global workqueue, this will cause a dependency issue.\n\n workqueue: WQ_MEM_RECLAIM nvme-delete-wq:nvme_delete_ctrl_work [nvme_core]\n is flushing !WQ_MEM_RECLAIM events:flush_cpu_slab\n WARNING: CPU: 37 PID: 410 at kernel/workqueue.c:2637\n check_flush_dependency+0x10a/0x120\n Workqueue: nvme-delete-wq nvme_delete_ctrl_work [nvme_core]\n RIP: 0010:check_flush_dependency+0x10a/0x120[ 453.262125] Call Trace:\n __flush_work.isra.0+0xbf/0x220\n ? __queue_work+0x1dc/0x420\n flush_all_cpus_locked+0xfb/0x120\n __kmem_cache_shutdown+0x2b/0x320\n kmem_cache_destroy+0x49/0x100\n bioset_exit+0x143/0x190\n blk_release_queue+0xb9/0x100\n kobject_cleanup+0x37/0x130\n nvme_fc_ctrl_free+0xc6/0x150 [nvme_fc]\n nvme_free_ctrl+0x1ac/0x2b0 [nvme_core]\n\nFix this bug by creating a workqueue for the flush operation with\nthe WQ_MEM_RECLAIM bit set.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48658", "url": "https://www.suse.com/security/cve/CVE-2022-48658" }, { "category": "external", "summary": "SUSE Bug 1223496 for CVE-2022-48658", "url": "https://bugzilla.suse.com/1223496" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48658" }, { "cve": "CVE-2022-48659", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48659" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: fix to return errno if kmalloc() fails\n\nIn create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to\nout-of-memory, if it fails, return errno correctly rather than\ntriggering panic via BUG_ON();\n\nkernel BUG at mm/slub.c:5893!\nInternal error: Oops - BUG: 0 [#1] PREEMPT SMP\n\nCall trace:\n sysfs_slab_add+0x258/0x260 mm/slub.c:5973\n __kmem_cache_create+0x60/0x118 mm/slub.c:4899\n create_cache mm/slab_common.c:229 [inline]\n kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335\n kmem_cache_create+0x1c/0x28 mm/slab_common.c:390\n f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline]\n f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808\n f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149\n mount_bdev+0x1b8/0x210 fs/super.c:1400\n f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512\n legacy_get_tree+0x30/0x74 fs/fs_context.c:610\n vfs_get_tree+0x40/0x140 fs/super.c:1530\n do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040\n path_mount+0x358/0x914 fs/namespace.c:3370\n do_mount fs/namespace.c:3383 [inline]\n __do_sys_mount fs/namespace.c:3591 [inline]\n __se_sys_mount fs/namespace.c:3568 [inline]\n __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48659", "url": "https://www.suse.com/security/cve/CVE-2022-48659" }, { "category": "external", "summary": "SUSE Bug 1223498 for CVE-2022-48659", "url": "https://bugzilla.suse.com/1223498" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48659" }, { "cve": "CVE-2022-48660", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48660" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpiolib: cdev: Set lineevent_state::irq after IRQ register successfully\n\nWhen running gpio test on nxp-ls1028 platform with below command\ngpiomon --num-events=3 --rising-edge gpiochip1 25\nThere will be a warning trace as below:\nCall trace:\nfree_irq+0x204/0x360\nlineevent_free+0x64/0x70\ngpio_ioctl+0x598/0x6a0\n__arm64_sys_ioctl+0xb4/0x100\ninvoke_syscall+0x5c/0x130\n......\nel0t_64_sync+0x1a0/0x1a4\nThe reason of this issue is that calling request_threaded_irq()\nfunction failed, and then lineevent_free() is invoked to release\nthe resource. Since the lineevent_state::irq was already set, so\nthe subsequent invocation of free_irq() would trigger the above\nwarning call trace. To fix this issue, set the lineevent_state::irq\nafter the IRQ register successfully.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48660", "url": "https://www.suse.com/security/cve/CVE-2022-48660" }, { "category": "external", "summary": "SUSE Bug 1223487 for CVE-2022-48660", "url": "https://bugzilla.suse.com/1223487" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48660" }, { "cve": "CVE-2022-48662", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48662" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Really move i915_gem_context.link under ref protection\n\ni915_perf assumes that it can use the i915_gem_context reference to\nprotect its i915-\u003egem.contexts.list iteration. However, this requires\nthat we do not remove the context from the list until after we drop the\nfinal reference and release the struct. If, as currently, we remove the\ncontext from the list during context_close(), the link.next pointer may\nbe poisoned while we are holding the context reference and cause a GPF:\n\n[ 4070.573157] i915 0000:00:02.0: [drm:i915_perf_open_ioctl [i915]] filtering on ctx_id=0x1fffff ctx_id_mask=0x1fffff\n[ 4070.574881] general protection fault, probably for non-canonical address 0xdead000000000100: 0000 [#1] PREEMPT SMP\n[ 4070.574897] CPU: 1 PID: 284392 Comm: amd_performance Tainted: G E 5.17.9 #180\n[ 4070.574903] Hardware name: Intel Corporation NUC7i5BNK/NUC7i5BNB, BIOS BNKBL357.86A.0052.2017.0918.1346 09/18/2017\n[ 4070.574907] RIP: 0010:oa_configure_all_contexts.isra.0+0x222/0x350 [i915]\n[ 4070.574982] Code: 08 e8 32 6e 10 e1 4d 8b 6d 50 b8 ff ff ff ff 49 83 ed 50 f0 41 0f c1 04 24 83 f8 01 0f 84 e3 00 00 00 85 c0 0f 8e fa 00 00 00 \u003c49\u003e 8b 45 50 48 8d 70 b0 49 8d 45 50 48 39 44 24 10 0f 85 34 fe ff\n[ 4070.574990] RSP: 0018:ffffc90002077b78 EFLAGS: 00010202\n[ 4070.574995] RAX: 0000000000000002 RBX: 0000000000000002 RCX: 0000000000000000\n[ 4070.575000] RDX: 0000000000000001 RSI: ffffc90002077b20 RDI: ffff88810ddc7c68\n[ 4070.575004] RBP: 0000000000000001 R08: ffff888103242648 R09: fffffffffffffffc\n[ 4070.575008] R10: ffffffff82c50bc0 R11: 0000000000025c80 R12: ffff888101bf1860\n[ 4070.575012] R13: dead0000000000b0 R14: ffffc90002077c04 R15: ffff88810be5cabc\n[ 4070.575016] FS: 00007f1ed50c0780(0000) GS:ffff88885ec80000(0000) knlGS:0000000000000000\n[ 4070.575021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4070.575025] CR2: 00007f1ed5590280 CR3: 000000010ef6f005 CR4: 00000000003706e0\n[ 4070.575029] Call Trace:\n[ 4070.575033] \u003cTASK\u003e\n[ 4070.575037] lrc_configure_all_contexts+0x13e/0x150 [i915]\n[ 4070.575103] gen8_enable_metric_set+0x4d/0x90 [i915]\n[ 4070.575164] i915_perf_open_ioctl+0xbc0/0x1500 [i915]\n[ 4070.575224] ? asm_common_interrupt+0x1e/0x40\n[ 4070.575232] ? i915_oa_init_reg_state+0x110/0x110 [i915]\n[ 4070.575290] drm_ioctl_kernel+0x85/0x110\n[ 4070.575296] ? update_load_avg+0x5f/0x5e0\n[ 4070.575302] drm_ioctl+0x1d3/0x370\n[ 4070.575307] ? i915_oa_init_reg_state+0x110/0x110 [i915]\n[ 4070.575382] ? gen8_gt_irq_handler+0x46/0x130 [i915]\n[ 4070.575445] __x64_sys_ioctl+0x3c4/0x8d0\n[ 4070.575451] ? __do_softirq+0xaa/0x1d2\n[ 4070.575456] do_syscall_64+0x35/0x80\n[ 4070.575461] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 4070.575467] RIP: 0033:0x7f1ed5c10397\n[ 4070.575471] Code: 3c 1c e8 1c ff ff ff 85 c0 79 87 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d a9 da 0d 00 f7 d8 64 89 01 48\n[ 4070.575478] RSP: 002b:00007ffd65c8d7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n[ 4070.575484] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f1ed5c10397\n[ 4070.575488] RDX: 00007ffd65c8d7c0 RSI: 0000000040106476 RDI: 0000000000000006\n[ 4070.575492] RBP: 00005620972f9c60 R08: 000000000000000a R09: 0000000000000005\n[ 4070.575496] R10: 000000000000000d R11: 0000000000000246 R12: 000000000000000a\n[ 4070.575500] R13: 000000000000000d R14: 0000000000000000 R15: 00007ffd65c8d7c0\n[ 4070.575505] \u003c/TASK\u003e\n[ 4070.575507] Modules linked in: nls_ascii(E) nls_cp437(E) vfat(E) fat(E) i915(E) x86_pkg_temp_thermal(E) intel_powerclamp(E) crct10dif_pclmul(E) crc32_pclmul(E) crc32c_intel(E) aesni_intel(E) crypto_simd(E) intel_gtt(E) cryptd(E) ttm(E) rapl(E) intel_cstate(E) drm_kms_helper(E) cfbfillrect(E) syscopyarea(E) cfbimgblt(E) intel_uncore(E) sysfillrect(E) mei_me(E) sysimgblt(E) i2c_i801(E) fb_sys_fops(E) mei(E) intel_pch_thermal(E) i2c_smbus\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48662", "url": "https://www.suse.com/security/cve/CVE-2022-48662" }, { "category": "external", "summary": "SUSE Bug 1223505 for CVE-2022-48662", "url": "https://bugzilla.suse.com/1223505" }, { "category": "external", "summary": "SUSE Bug 1223521 for CVE-2022-48662", "url": "https://bugzilla.suse.com/1223521" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2022-48662" }, { "cve": "CVE-2022-48663", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48663" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mockup: fix NULL pointer dereference when removing debugfs\n\nWe now remove the device\u0027s debugfs entries when unbinding the driver.\nThis now causes a NULL-pointer dereference on module exit because the\nplatform devices are unregistered *after* the global debugfs directory\nhas been recursively removed. Fix it by unregistering the devices first.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48663", "url": "https://www.suse.com/security/cve/CVE-2022-48663" }, { "category": "external", "summary": "SUSE Bug 1223523 for CVE-2022-48663", "url": "https://bugzilla.suse.com/1223523" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48663" }, { "cve": "CVE-2022-48667", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48667" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: fix temporary data corruption in insert range\n\ninsert range doesn\u0027t discard the affected cached region\nso can risk temporarily corrupting file data.\n\nAlso includes some minor cleanup (avoiding rereading\ninode size repeatedly unnecessarily) to make it clearer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48667", "url": "https://www.suse.com/security/cve/CVE-2022-48667" }, { "category": "external", "summary": "SUSE Bug 1223518 for CVE-2022-48667", "url": "https://bugzilla.suse.com/1223518" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48667" }, { "cve": "CVE-2022-48668", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48668" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: fix temporary data corruption in collapse range\n\ncollapse range doesn\u0027t discard the affected cached region\nso can risk temporarily corrupting the file data. This\nfixes xfstest generic/031\n\nI also decided to merge a minor cleanup to this into the same patch\n(avoiding rereading inode size repeatedly unnecessarily) to make it\nclearer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48668", "url": "https://www.suse.com/security/cve/CVE-2022-48668" }, { "category": "external", "summary": "SUSE Bug 1223516 for CVE-2022-48668", "url": "https://bugzilla.suse.com/1223516" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48668" }, { "cve": "CVE-2022-48671", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48671" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n\nsyzbot is hitting percpu_rwsem_assert_held(\u0026cpu_hotplug_lock) warning at\ncpuset_attach() [1], for commit 4f7e7236435ca0ab (\"cgroup: Fix\nthreadgroup_rwsem \u003c-\u003e cpus_read_lock() deadlock\") missed that\ncpuset_attach() is also called from cgroup_attach_task_all().\nAdd cpus_read_lock() like what cgroup_procs_write_start() does.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48671", "url": "https://www.suse.com/security/cve/CVE-2022-48671" }, { "category": "external", "summary": "SUSE Bug 1223929 for CVE-2022-48671", "url": "https://bugzilla.suse.com/1223929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48671" }, { "cve": "CVE-2022-48672", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48672" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: fdt: fix off-by-one error in unflatten_dt_nodes()\n\nCommit 78c44d910d3e (\"drivers/of: Fix depth when unflattening devicetree\")\nforgot to fix up the depth check in the loop body in unflatten_dt_nodes()\nwhich makes it possible to overflow the nps[] buffer...\n\nFound by Linux Verification Center (linuxtesting.org) with the SVACE static\nanalysis tool.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48672", "url": "https://www.suse.com/security/cve/CVE-2022-48672" }, { "category": "external", "summary": "SUSE Bug 1223931 for CVE-2022-48672", "url": "https://bugzilla.suse.com/1223931" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48672" }, { "cve": "CVE-2022-48673", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48673" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: Fix possible access to freed memory in link clear\n\nAfter modifying the QP to the Error state, all RX WR would be completed\nwith WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not\nwait for it is done, but destroy the QP and free the link group directly.\nSo there is a risk that accessing the freed memory in tasklet context.\n\nHere is a crash example:\n\n BUG: unable to handle page fault for address: ffffffff8f220860\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD f7300e067 P4D f7300e067 PUD f7300f063 PMD 8c4e45063 PTE 800ffff08c9df060\n Oops: 0002 [#1] SMP PTI\n CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Tainted: G S OE 5.10.0-0607+ #23\n Hardware name: Inspur NF5280M4/YZMB-00689-101, BIOS 4.1.20 07/09/2018\n RIP: 0010:native_queued_spin_lock_slowpath+0x176/0x1b0\n Code: f3 90 48 8b 32 48 85 f6 74 f6 eb d5 c1 ee 12 83 e0 03 83 ee 01 48 c1 e0 05 48 63 f6 48 05 00 c8 02 00 48 03 04 f5 00 09 98 8e \u003c48\u003e 89 10 8b 42 08 85 c0 75 09 f3 90 8b 42 08 85 c0 74 f7 48 8b 32\n RSP: 0018:ffffb3b6c001ebd8 EFLAGS: 00010086\n RAX: ffffffff8f220860 RBX: 0000000000000246 RCX: 0000000000080000\n RDX: ffff91db1f86c800 RSI: 000000000000173c RDI: ffff91db62bace00\n RBP: ffff91db62bacc00 R08: 0000000000000000 R09: c00000010000028b\n R10: 0000000000055198 R11: ffffb3b6c001ea58 R12: ffff91db80e05010\n R13: 000000000000000a R14: 0000000000000006 R15: 0000000000000040\n FS: 0000000000000000(0000) GS:ffff91db1f840000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: ffffffff8f220860 CR3: 00000001f9580004 CR4: 00000000003706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cIRQ\u003e\n _raw_spin_lock_irqsave+0x30/0x40\n mlx5_ib_poll_cq+0x4c/0xc50 [mlx5_ib]\n smc_wr_rx_tasklet_fn+0x56/0xa0 [smc]\n tasklet_action_common.isra.21+0x66/0x100\n __do_softirq+0xd5/0x29c\n asm_call_irq_on_stack+0x12/0x20\n \u003c/IRQ\u003e\n do_softirq_own_stack+0x37/0x40\n irq_exit_rcu+0x9d/0xa0\n sysvec_call_function_single+0x34/0x80\n asm_sysvec_call_function_single+0x12/0x20", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48673", "url": "https://www.suse.com/security/cve/CVE-2022-48673" }, { "category": "external", "summary": "SUSE Bug 1223934 for CVE-2022-48673", "url": "https://bugzilla.suse.com/1223934" }, { "category": "external", "summary": "SUSE Bug 1223940 for CVE-2022-48673", "url": "https://bugzilla.suse.com/1223940" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48673" }, { "cve": "CVE-2022-48675", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48675" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/core: Fix a nested dead lock as part of ODP flow\n\nFix a nested dead lock as part of ODP flow by using mmput_async().\n\nFrom the below call trace [1] can see that calling mmput() once we have\nthe umem_odp-\u003eumem_mutex locked as required by\nib_umem_odp_map_dma_and_lock() might trigger in the same task the\nexit_mmap()-\u003e__mmu_notifier_release()-\u003emlx5_ib_invalidate_range() which\nmay dead lock when trying to lock the same mutex.\n\nMoving to use mmput_async() will solve the problem as the above\nexit_mmap() flow will be called in other task and will be executed once\nthe lock will be available.\n\n[1]\n[64843.077665] task:kworker/u133:2 state:D stack: 0 pid:80906 ppid:\n2 flags:0x00004000\n[64843.077672] Workqueue: mlx5_ib_page_fault mlx5_ib_eqe_pf_action [mlx5_ib]\n[64843.077719] Call Trace:\n[64843.077722] \u003cTASK\u003e\n[64843.077724] __schedule+0x23d/0x590\n[64843.077729] schedule+0x4e/0xb0\n[64843.077735] schedule_preempt_disabled+0xe/0x10\n[64843.077740] __mutex_lock.constprop.0+0x263/0x490\n[64843.077747] __mutex_lock_slowpath+0x13/0x20\n[64843.077752] mutex_lock+0x34/0x40\n[64843.077758] mlx5_ib_invalidate_range+0x48/0x270 [mlx5_ib]\n[64843.077808] __mmu_notifier_release+0x1a4/0x200\n[64843.077816] exit_mmap+0x1bc/0x200\n[64843.077822] ? walk_page_range+0x9c/0x120\n[64843.077828] ? __cond_resched+0x1a/0x50\n[64843.077833] ? mutex_lock+0x13/0x40\n[64843.077839] ? uprobe_clear_state+0xac/0x120\n[64843.077860] mmput+0x5f/0x140\n[64843.077867] ib_umem_odp_map_dma_and_lock+0x21b/0x580 [ib_core]\n[64843.077931] pagefault_real_mr+0x9a/0x140 [mlx5_ib]\n[64843.077962] pagefault_mr+0xb4/0x550 [mlx5_ib]\n[64843.077992] pagefault_single_data_segment.constprop.0+0x2ac/0x560\n[mlx5_ib]\n[64843.078022] mlx5_ib_eqe_pf_action+0x528/0x780 [mlx5_ib]\n[64843.078051] process_one_work+0x22b/0x3d0\n[64843.078059] worker_thread+0x53/0x410\n[64843.078065] ? process_one_work+0x3d0/0x3d0\n[64843.078073] kthread+0x12a/0x150\n[64843.078079] ? set_kthread_struct+0x50/0x50\n[64843.078085] ret_from_fork+0x22/0x30\n[64843.078093] \u003c/TASK\u003e", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48675", "url": "https://www.suse.com/security/cve/CVE-2022-48675" }, { "category": "external", "summary": "SUSE Bug 1223894 for CVE-2022-48675", "url": "https://bugzilla.suse.com/1223894" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48675" }, { "cve": "CVE-2022-48686", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48686" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix UAF when detecting digest errors\n\nWe should also bail from the io_work loop when we set rd_enabled to true,\nso we don\u0027t attempt to read data from the socket when the TCP stream is\nalready out-of-sync or corrupted.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48686", "url": "https://www.suse.com/security/cve/CVE-2022-48686" }, { "category": "external", "summary": "SUSE Bug 1223948 for CVE-2022-48686", "url": "https://bugzilla.suse.com/1223948" }, { "category": "external", "summary": "SUSE Bug 1226337 for CVE-2022-48686", "url": "https://bugzilla.suse.com/1226337" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2022-48686" }, { "cve": "CVE-2022-48687", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48687" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: fix out-of-bounds read when setting HMAC data.\n\nThe SRv6 layer allows defining HMAC data that can later be used to sign IPv6\nSegment Routing Headers. This configuration is realised via netlink through\nfour attributes: SEG6_ATTR_HMACKEYID, SEG6_ATTR_SECRET, SEG6_ATTR_SECRETLEN and\nSEG6_ATTR_ALGID. Because the SECRETLEN attribute is decoupled from the actual\nlength of the SECRET attribute, it is possible to provide invalid combinations\n(e.g., secret = \"\", secretlen = 64). This case is not checked in the code and\nwith an appropriately crafted netlink message, an out-of-bounds read of up\nto 64 bytes (max secret length) can occur past the skb end pointer and into\nskb_shared_info:\n\nBreakpoint 1, seg6_genl_sethmac (skb=\u003coptimized out\u003e, info=\u003coptimized out\u003e) at net/ipv6/seg6.c:208\n208\t\tmemcpy(hinfo-\u003esecret, secret, slen);\n(gdb) bt\n #0 seg6_genl_sethmac (skb=\u003coptimized out\u003e, info=\u003coptimized out\u003e) at net/ipv6/seg6.c:208\n #1 0xffffffff81e012e9 in genl_family_rcv_msg_doit (skb=skb@entry=0xffff88800b1f9f00, nlh=nlh@entry=0xffff88800b1b7600,\n extack=extack@entry=0xffffc90000ba7af0, ops=ops@entry=0xffffc90000ba7a80, hdrlen=4, net=0xffffffff84237580 \u003cinit_net\u003e, family=\u003coptimized out\u003e,\n family=\u003coptimized out\u003e) at net/netlink/genetlink.c:731\n #2 0xffffffff81e01435 in genl_family_rcv_msg (extack=0xffffc90000ba7af0, nlh=0xffff88800b1b7600, skb=0xffff88800b1f9f00,\n family=0xffffffff82fef6c0 \u003cseg6_genl_family\u003e) at net/netlink/genetlink.c:775\n #3 genl_rcv_msg (skb=0xffff88800b1f9f00, nlh=0xffff88800b1b7600, extack=0xffffc90000ba7af0) at net/netlink/genetlink.c:792\n #4 0xffffffff81dfffc3 in netlink_rcv_skb (skb=skb@entry=0xffff88800b1f9f00, cb=cb@entry=0xffffffff81e01350 \u003cgenl_rcv_msg\u003e)\n at net/netlink/af_netlink.c:2501\n #5 0xffffffff81e00919 in genl_rcv (skb=0xffff88800b1f9f00) at net/netlink/genetlink.c:803\n #6 0xffffffff81dff6ae in netlink_unicast_kernel (ssk=0xffff888010eec800, skb=0xffff88800b1f9f00, sk=0xffff888004aed000)\n at net/netlink/af_netlink.c:1319\n #7 netlink_unicast (ssk=ssk@entry=0xffff888010eec800, skb=skb@entry=0xffff88800b1f9f00, portid=portid@entry=0, nonblock=\u003coptimized out\u003e)\n at net/netlink/af_netlink.c:1345\n #8 0xffffffff81dff9a4 in netlink_sendmsg (sock=\u003coptimized out\u003e, msg=0xffffc90000ba7e48, len=\u003coptimized out\u003e) at net/netlink/af_netlink.c:1921\n...\n(gdb) p/x ((struct sk_buff *)0xffff88800b1f9f00)-\u003ehead + ((struct sk_buff *)0xffff88800b1f9f00)-\u003eend\n$1 = 0xffff88800b1b76c0\n(gdb) p/x secret\n$2 = 0xffff88800b1b76c0\n(gdb) p slen\n$3 = 64 \u0027@\u0027\n\nThe OOB data can then be read back from userspace by dumping HMAC state. This\ncommit fixes this by ensuring SECRETLEN cannot exceed the actual length of\nSECRET.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48687", "url": "https://www.suse.com/security/cve/CVE-2022-48687" }, { "category": "external", "summary": "SUSE Bug 1223952 for CVE-2022-48687", "url": "https://bugzilla.suse.com/1223952" }, { "category": "external", "summary": "SUSE Bug 1224043 for CVE-2022-48687", "url": "https://bugzilla.suse.com/1224043" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2022-48687" }, { "cve": "CVE-2022-48688", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48688" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix kernel crash during module removal\n\nThe driver incorrectly frees client instance and subsequent\ni40e module removal leads to kernel crash.\n\nReproducer:\n1. Do ethtool offline test followed immediately by another one\nhost# ethtool -t eth0 offline; ethtool -t eth0 offline\n2. Remove recursively irdma module that also removes i40e module\nhost# modprobe -r irdma\n\nResult:\n[ 8675.035651] i40e 0000:3d:00.0 eno1: offline testing starting\n[ 8675.193774] i40e 0000:3d:00.0 eno1: testing finished\n[ 8675.201316] i40e 0000:3d:00.0 eno1: offline testing starting\n[ 8675.358921] i40e 0000:3d:00.0 eno1: testing finished\n[ 8675.496921] i40e 0000:3d:00.0: IRDMA hardware initialization FAILED init_state=2 status=-110\n[ 8686.188955] i40e 0000:3d:00.1: i40e_ptp_stop: removed PHC on eno2\n[ 8686.943890] i40e 0000:3d:00.1: Deleted LAN device PF1 bus=0x3d dev=0x00 func=0x01\n[ 8686.952669] i40e 0000:3d:00.0: i40e_ptp_stop: removed PHC on eno1\n[ 8687.761787] BUG: kernel NULL pointer dereference, address: 0000000000000030\n[ 8687.768755] #PF: supervisor read access in kernel mode\n[ 8687.773895] #PF: error_code(0x0000) - not-present page\n[ 8687.779034] PGD 0 P4D 0\n[ 8687.781575] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 8687.785935] CPU: 51 PID: 172891 Comm: rmmod Kdump: loaded Tainted: G W I 5.19.0+ #2\n[ 8687.794800] Hardware name: Intel Corporation S2600WFD/S2600WFD, BIOS SE5C620.86B.0X.02.0001.051420190324 05/14/2019\n[ 8687.805222] RIP: 0010:i40e_lan_del_device+0x13/0xb0 [i40e]\n[ 8687.810719] Code: d4 84 c0 0f 84 b8 25 01 00 e9 9c 25 01 00 41 bc f4 ff ff ff eb 91 90 0f 1f 44 00 00 41 54 55 53 48 8b 87 58 08 00 00 48 89 fb \u003c48\u003e 8b 68 30 48 89 ef e8 21 8a 0f d5 48 89 ef e8 a9 78 0f d5 48 8b\n[ 8687.829462] RSP: 0018:ffffa604072efce0 EFLAGS: 00010202\n[ 8687.834689] RAX: 0000000000000000 RBX: ffff8f43833b2000 RCX: 0000000000000000\n[ 8687.841821] RDX: 0000000000000000 RSI: ffff8f4b0545b298 RDI: ffff8f43833b2000\n[ 8687.848955] RBP: ffff8f43833b2000 R08: 0000000000000001 R09: 0000000000000000\n[ 8687.856086] R10: 0000000000000000 R11: 000ffffffffff000 R12: ffff8f43833b2ef0\n[ 8687.863218] R13: ffff8f43833b2ef0 R14: ffff915103966000 R15: ffff8f43833b2008\n[ 8687.870342] FS: 00007f79501c3740(0000) GS:ffff8f4adffc0000(0000) knlGS:0000000000000000\n[ 8687.878427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 8687.884174] CR2: 0000000000000030 CR3: 000000014276e004 CR4: 00000000007706e0\n[ 8687.891306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 8687.898441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 8687.905572] PKRU: 55555554\n[ 8687.908286] Call Trace:\n[ 8687.910737] \u003cTASK\u003e\n[ 8687.912843] i40e_remove+0x2c0/0x330 [i40e]\n[ 8687.917040] pci_device_remove+0x33/0xa0\n[ 8687.920962] device_release_driver_internal+0x1aa/0x230\n[ 8687.926188] driver_detach+0x44/0x90\n[ 8687.929770] bus_remove_driver+0x55/0xe0\n[ 8687.933693] pci_unregister_driver+0x2a/0xb0\n[ 8687.937967] i40e_exit_module+0xc/0xf48 [i40e]\n\nTwo offline tests cause IRDMA driver failure (ETIMEDOUT) and this\nfailure is indicated back to i40e_client_subtask() that calls\ni40e_client_del_instance() to free client instance referenced\nby pf-\u003ecinst and sets this pointer to NULL. During the module\nremoval i40e_remove() calls i40e_lan_del_device() that dereferences\npf-\u003ecinst that is NULL -\u003e crash.\nDo not remove client instance when client open callbacks fails and\njust clear __I40E_CLIENT_INSTANCE_OPENED bit. The driver also needs\nto take care about this situation (when netdev is up and client\nis NOT opened) in i40e_notify_client_of_netdev_close() and\ncalls client close callback only when __I40E_CLIENT_INSTANCE_OPENED\nis set.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48688", "url": "https://www.suse.com/security/cve/CVE-2022-48688" }, { "category": "external", "summary": "SUSE Bug 1223953 for CVE-2022-48688", "url": "https://bugzilla.suse.com/1223953" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48688" }, { "cve": "CVE-2022-48690", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48690" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix DMA mappings leak\n\nFix leak, when user changes ring parameters.\nDuring reallocation of RX buffers, new DMA mappings are created for\nthose buffers. New buffers with different RX ring count should\nsubstitute older ones, but those buffers were freed in ice_vsi_cfg_rxq\nand reallocated again with ice_alloc_rx_buf. kfree on rx_buf caused\nleak of already mapped DMA.\nReallocate ZC with xdp_buf struct, when BPF program loads. Reallocate\nback to rx_buf, when BPF program unloads.\nIf BPF program is loaded/unloaded and XSK pools are created, reallocate\nRX queues accordingly in XDP_SETUP_XSK_POOL handler.\n\nSteps for reproduction:\nwhile :\ndo\n\tfor ((i=0; i\u003c=8160; i=i+32))\n\tdo\n\t\tethtool -G enp130s0f0 rx $i tx $i\n\t\tsleep 0.5\n\t\tethtool -g enp130s0f0\n\tdone\ndone", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48690", "url": "https://www.suse.com/security/cve/CVE-2022-48690" }, { "category": "external", "summary": "SUSE Bug 1223960 for CVE-2022-48690", "url": "https://bugzilla.suse.com/1223960" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48690" }, { "cve": "CVE-2022-48692", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48692" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srp: Set scmnd-\u003eresult only when scmnd is not NULL\n\nThis change fixes the following kernel NULL pointer dereference\nwhich is reproduced by blktests srp/007 occasionally.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000170\nPGD 0 P4D 0\nOops: 0002 [#1] PREEMPT SMP NOPTI\nCPU: 0 PID: 9 Comm: kworker/0:1H Kdump: loaded Not tainted 6.0.0-rc1+ #37\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.15.0-29-g6a62e0cb0dfe-prebuilt.qemu.org 04/01/2014\nWorkqueue: 0x0 (kblockd)\nRIP: 0010:srp_recv_done+0x176/0x500 [ib_srp]\nCode: 00 4d 85 ff 0f 84 52 02 00 00 48 c7 82 80 02 00 00 00 00 00 00 4c 89 df 4c 89 14 24 e8 53 d3 4a f6 4c 8b 14 24 41 0f b6 42 13 \u003c41\u003e 89 87 70 01 00 00 41 0f b6 52 12 f6 c2 02 74 44 41 8b 42 1c b9\nRSP: 0018:ffffaef7c0003e28 EFLAGS: 00000282\nRAX: 0000000000000000 RBX: ffff9bc9486dea60 RCX: 0000000000000000\nRDX: 0000000000000102 RSI: ffffffffb76bbd0e RDI: 00000000ffffffff\nRBP: ffff9bc980099a00 R08: 0000000000000001 R09: 0000000000000001\nR10: ffff9bca53ef0000 R11: ffff9bc980099a10 R12: ffff9bc956e14000\nR13: ffff9bc9836b9cb0 R14: ffff9bc9557b4480 R15: 0000000000000000\nFS: 0000000000000000(0000) GS:ffff9bc97ec00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000170 CR3: 0000000007e04000 CR4: 00000000000006f0\nCall Trace:\n \u003cIRQ\u003e\n __ib_process_cq+0xb7/0x280 [ib_core]\n ib_poll_handler+0x2b/0x130 [ib_core]\n irq_poll_softirq+0x93/0x150\n __do_softirq+0xee/0x4b8\n irq_exit_rcu+0xf7/0x130\n sysvec_apic_timer_interrupt+0x8e/0xc0\n \u003c/IRQ\u003e", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48692", "url": "https://www.suse.com/security/cve/CVE-2022-48692" }, { "category": "external", "summary": "SUSE Bug 1223962 for CVE-2022-48692", "url": "https://bugzilla.suse.com/1223962" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48692" }, { "cve": "CVE-2022-48693", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48693" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs\n\nIn brcmstb_pm_probe(), there are two kinds of leak bugs:\n\n(1) we need to add of_node_put() when for_each__matching_node() breaks\n(2) we need to add iounmap() for each iomap in fail path", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48693", "url": "https://www.suse.com/security/cve/CVE-2022-48693" }, { "category": "external", "summary": "SUSE Bug 1223963 for CVE-2022-48693", "url": "https://bugzilla.suse.com/1223963" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48693" }, { "cve": "CVE-2022-48694", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48694" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix drain SQ hang with no completion\n\nSW generated completions for outstanding WRs posted on SQ\nafter QP is in error target the wrong CQ. This causes the\nib_drain_sq to hang with no completion.\n\nFix this to generate completions on the right CQ.\n\n[ 863.969340] INFO: task kworker/u52:2:671 blocked for more than 122 seconds.\n[ 863.979224] Not tainted 5.14.0-130.el9.x86_64 #1\n[ 863.986588] \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[ 863.996997] task:kworker/u52:2 state:D stack: 0 pid: 671 ppid: 2 flags:0x00004000\n[ 864.007272] Workqueue: xprtiod xprt_autoclose [sunrpc]\n[ 864.014056] Call Trace:\n[ 864.017575] __schedule+0x206/0x580\n[ 864.022296] schedule+0x43/0xa0\n[ 864.026736] schedule_timeout+0x115/0x150\n[ 864.032185] __wait_for_common+0x93/0x1d0\n[ 864.037717] ? usleep_range_state+0x90/0x90\n[ 864.043368] __ib_drain_sq+0xf6/0x170 [ib_core]\n[ 864.049371] ? __rdma_block_iter_next+0x80/0x80 [ib_core]\n[ 864.056240] ib_drain_sq+0x66/0x70 [ib_core]\n[ 864.062003] rpcrdma_xprt_disconnect+0x82/0x3b0 [rpcrdma]\n[ 864.069365] ? xprt_prepare_transmit+0x5d/0xc0 [sunrpc]\n[ 864.076386] xprt_rdma_close+0xe/0x30 [rpcrdma]\n[ 864.082593] xprt_autoclose+0x52/0x100 [sunrpc]\n[ 864.088718] process_one_work+0x1e8/0x3c0\n[ 864.094170] worker_thread+0x50/0x3b0\n[ 864.099109] ? rescuer_thread+0x370/0x370\n[ 864.104473] kthread+0x149/0x170\n[ 864.109022] ? set_kthread_struct+0x40/0x40\n[ 864.114713] ret_from_fork+0x22/0x30", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48694", "url": "https://www.suse.com/security/cve/CVE-2022-48694" }, { "category": "external", "summary": "SUSE Bug 1223964 for CVE-2022-48694", "url": "https://bugzilla.suse.com/1223964" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48694" }, { "cve": "CVE-2022-48695", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48695" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Fix use-after-free warning\n\nFix the following use-after-free warning which is observed during\ncontroller reset:\n\nrefcount_t: underflow; use-after-free.\nWARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48695", "url": "https://www.suse.com/security/cve/CVE-2022-48695" }, { "category": "external", "summary": "SUSE Bug 1223941 for CVE-2022-48695", "url": "https://bugzilla.suse.com/1223941" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48695" }, { "cve": "CVE-2022-48697", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48697" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix a use-after-free\n\nFix the following use-after-free complaint triggered by blktests nvme/004:\n\nBUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350\nRead of size 4 at addr 0000607bd1835943 by task kworker/13:1/460\nWorkqueue: nvmet-wq nvme_loop_execute_work [nvme_loop]\nCall Trace:\n show_stack+0x52/0x58\n dump_stack_lvl+0x49/0x5e\n print_report.cold+0x36/0x1e2\n kasan_report+0xb9/0xf0\n __asan_load4+0x6b/0x80\n blk_mq_complete_request_remote+0xac/0x350\n nvme_loop_queue_response+0x1df/0x275 [nvme_loop]\n __nvmet_req_complete+0x132/0x4f0 [nvmet]\n nvmet_req_complete+0x15/0x40 [nvmet]\n nvmet_execute_io_connect+0x18a/0x1f0 [nvmet]\n nvme_loop_execute_work+0x20/0x30 [nvme_loop]\n process_one_work+0x56e/0xa70\n worker_thread+0x2d1/0x640\n kthread+0x183/0x1c0\n ret_from_fork+0x1f/0x30", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48697", "url": "https://www.suse.com/security/cve/CVE-2022-48697" }, { "category": "external", "summary": "SUSE Bug 1223922 for CVE-2022-48697", "url": "https://bugzilla.suse.com/1223922" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48697" }, { "cve": "CVE-2022-48698", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48698" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix memory leak when using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. Fix this up by properly\ncalling dput().", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48698", "url": "https://www.suse.com/security/cve/CVE-2022-48698" }, { "category": "external", "summary": "SUSE Bug 1223956 for CVE-2022-48698", "url": "https://bugzilla.suse.com/1223956" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48698" }, { "cve": "CVE-2022-48699", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48699" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/debug: fix dentry leak in update_sched_domain_debugfs\n\nKuyo reports that the pattern of using debugfs_remove(debugfs_lookup())\nleaks a dentry and with a hotplug stress test, the machine eventually\nruns out of memory.\n\nFix this up by using the newly created debugfs_lookup_and_remove() call\ninstead which properly handles the dentry reference counting logic.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48699", "url": "https://www.suse.com/security/cve/CVE-2022-48699" }, { "category": "external", "summary": "SUSE Bug 1223996 for CVE-2022-48699", "url": "https://bugzilla.suse.com/1223996" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48699" }, { "cve": "CVE-2022-48700", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48700" } ], "notes": [ { "category": "general", "text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48700", "url": "https://www.suse.com/security/cve/CVE-2022-48700" }, { "category": "external", "summary": "SUSE Bug 1223957 for CVE-2022-48700", "url": "https://bugzilla.suse.com/1223957" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48700" }, { "cve": "CVE-2022-48701", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48701" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()\n\nThere may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and\nthe number of it\u0027s interfaces less than 4, an out-of-bounds read bug occurs\nwhen parsing the interface descriptor for this device.\n\nFix this by checking the number of interfaces.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48701", "url": "https://www.suse.com/security/cve/CVE-2022-48701" }, { "category": "external", "summary": "SUSE Bug 1223921 for CVE-2022-48701", "url": "https://bugzilla.suse.com/1223921" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2022-48701" }, { "cve": "CVE-2022-48702", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48702" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()\n\nThe voice allocator sometimes begins allocating from near the end of the\narray and then wraps around, however snd_emu10k1_pcm_channel_alloc()\naccesses the newly allocated voices as if it never wrapped around.\n\nThis results in out of bounds access if the first voice has a high enough\nindex so that first_voice + requested_voice_count \u003e NUM_G (64).\nThe more voices are requested, the more likely it is for this to occur.\n\nThis was initially discovered using PipeWire, however it can be reproduced\nby calling aplay multiple times with 16 channels:\naplay -r 48000 -D plughw:CARD=Live,DEV=3 -c 16 /dev/zero\n\nUBSAN: array-index-out-of-bounds in sound/pci/emu10k1/emupcm.c:127:40\nindex 65 is out of range for type \u0027snd_emu10k1_voice [64]\u0027\nCPU: 1 PID: 31977 Comm: aplay Tainted: G W IOE 6.0.0-rc2-emu10k1+ #7\nHardware name: ASUSTEK COMPUTER INC P5W DH Deluxe/P5W DH Deluxe, BIOS 3002 07/22/2010\nCall Trace:\n\u003cTASK\u003e\ndump_stack_lvl+0x49/0x63\ndump_stack+0x10/0x16\nubsan_epilogue+0x9/0x3f\n__ubsan_handle_out_of_bounds.cold+0x44/0x49\nsnd_emu10k1_playback_hw_params+0x3bc/0x420 [snd_emu10k1]\nsnd_pcm_hw_params+0x29f/0x600 [snd_pcm]\nsnd_pcm_common_ioctl+0x188/0x1410 [snd_pcm]\n? exit_to_user_mode_prepare+0x35/0x170\n? do_syscall_64+0x69/0x90\n? syscall_exit_to_user_mode+0x26/0x50\n? do_syscall_64+0x69/0x90\n? exit_to_user_mode_prepare+0x35/0x170\nsnd_pcm_ioctl+0x27/0x40 [snd_pcm]\n__x64_sys_ioctl+0x95/0xd0\ndo_syscall_64+0x5c/0x90\n? do_syscall_64+0x69/0x90\n? do_syscall_64+0x69/0x90\nentry_SYSCALL_64_after_hwframe+0x63/0xcd", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48702", "url": "https://www.suse.com/security/cve/CVE-2022-48702" }, { "category": "external", "summary": "SUSE Bug 1223923 for CVE-2022-48702", "url": "https://bugzilla.suse.com/1223923" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48702" }, { "cve": "CVE-2022-48703", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48703" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR\n\nIn some case, the GDDV returns a package with a buffer which has\nzero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).\n\nThen the data_vault_read() got NULL point dereference problem when\naccessing the 0x10 value in data_vault.\n\n[ 71.024560] BUG: kernel NULL pointer dereference, address:\n0000000000000010\n\nThis patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or\nNULL value in data_vault.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48703", "url": "https://www.suse.com/security/cve/CVE-2022-48703" }, { "category": "external", "summary": "SUSE Bug 1223924 for CVE-2022-48703", "url": "https://bugzilla.suse.com/1223924" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48703" }, { "cve": "CVE-2022-48704", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-48704" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: add a force flush to delay work when radeon\n\nAlthough radeon card fence and wait for gpu to finish processing current batch rings,\nthere is still a corner case that radeon lockup work queue may not be fully flushed,\nand meanwhile the radeon_suspend_kms() function has called pci_set_power_state() to\nput device in D3hot state.\nPer PCI spec rev 4.0 on 5.3.1.4.1 D3hot State.\n\u003e Configuration and Message requests are the only TLPs accepted by a Function in\n\u003e the D3hot state. All other received Requests must be handled as Unsupported Requests,\n\u003e and all received Completions may optionally be handled as Unexpected Completions.\nThis issue will happen in following logs:\nUnable to handle kernel paging request at virtual address 00008800e0008010\nCPU 0 kworker/0:3(131): Oops 0\npc = [\u003cffffffff811bea5c\u003e] ra = [\u003cffffffff81240844\u003e] ps = 0000 Tainted: G W\npc is at si_gpu_check_soft_reset+0x3c/0x240\nra is at si_dma_is_lockup+0x34/0xd0\nv0 = 0000000000000000 t0 = fff08800e0008010 t1 = 0000000000010000\nt2 = 0000000000008010 t3 = fff00007e3c00000 t4 = fff00007e3c00258\nt5 = 000000000000ffff t6 = 0000000000000001 t7 = fff00007ef078000\ns0 = fff00007e3c016e8 s1 = fff00007e3c00000 s2 = fff00007e3c00018\ns3 = fff00007e3c00000 s4 = fff00007fff59d80 s5 = 0000000000000000\ns6 = fff00007ef07bd98\na0 = fff00007e3c00000 a1 = fff00007e3c016e8 a2 = 0000000000000008\na3 = 0000000000000001 a4 = 8f5c28f5c28f5c29 a5 = ffffffff810f4338\nt8 = 0000000000000275 t9 = ffffffff809b66f8 t10 = ff6769c5d964b800\nt11= 000000000000b886 pv = ffffffff811bea20 at = 0000000000000000\ngp = ffffffff81d89690 sp = 00000000aa814126\nDisabling lock debugging due to kernel taint\nTrace:\n[\u003cffffffff81240844\u003e] si_dma_is_lockup+0x34/0xd0\n[\u003cffffffff81119610\u003e] radeon_fence_check_lockup+0xd0/0x290\n[\u003cffffffff80977010\u003e] process_one_work+0x280/0x550\n[\u003cffffffff80977350\u003e] worker_thread+0x70/0x7c0\n[\u003cffffffff80977410\u003e] worker_thread+0x130/0x7c0\n[\u003cffffffff80982040\u003e] kthread+0x200/0x210\n[\u003cffffffff809772e0\u003e] worker_thread+0x0/0x7c0\n[\u003cffffffff80981f8c\u003e] kthread+0x14c/0x210\n[\u003cffffffff80911658\u003e] ret_from_kernel_thread+0x18/0x20\n[\u003cffffffff80981e40\u003e] kthread+0x0/0x210\n Code: ad3e0008 43f0074a ad7e0018 ad9e0020 8c3001e8 40230101\n \u003c88210000\u003e 4821ed21\nSo force lockup work queue flush to fix this problem.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-48704", "url": "https://www.suse.com/security/cve/CVE-2022-48704" }, { "category": "external", "summary": "SUSE Bug 1223932 for CVE-2022-48704", "url": "https://bugzilla.suse.com/1223932" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2022-48704" }, { "cve": "CVE-2023-2860", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-2860" } ], "notes": [ { "category": "general", "text": "An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-2860", "url": "https://www.suse.com/security/cve/CVE-2023-2860" }, { "category": "external", "summary": "SUSE Bug 1211592 for CVE-2023-2860", "url": "https://bugzilla.suse.com/1211592" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-2860" }, { "cve": "CVE-2023-52585", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52585" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()\n\nReturn invalid error code -EINVAL for invalid block id.\n\nFixes the below:\n\ndrivers/gpu/drm/amd/amdgpu/amdgpu_ras.c:1183 amdgpu_ras_query_error_status_helper() error: we previously assumed \u0027info\u0027 could be null (see line 1176)", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52585", "url": "https://www.suse.com/security/cve/CVE-2023-52585" }, { "category": "external", "summary": "SUSE Bug 1221080 for CVE-2023-52585", "url": "https://bugzilla.suse.com/1221080" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52585" }, { "cve": "CVE-2023-52589", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52589" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rkisp1: Fix IRQ disable race issue\n\nIn rkisp1_isp_stop() and rkisp1_csi_disable() the driver masks the\ninterrupts and then apparently assumes that the interrupt handler won\u0027t\nbe running, and proceeds in the stop procedure. This is not the case, as\nthe interrupt handler can already be running, which would lead to the\nISP being disabled while the interrupt handler handling a captured\nframe.\n\nThis brings up two issues: 1) the ISP could be powered off while the\ninterrupt handler is still running and accessing registers, leading to\nboard lockup, and 2) the interrupt handler code and the code that\ndisables the streaming might do things that conflict.\n\nIt is not clear to me if 2) causes a real issue, but 1) can be seen with\na suitable delay (or printk in my case) in the interrupt handler,\nleading to board lockup.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52589", "url": "https://www.suse.com/security/cve/CVE-2023-52589" }, { "category": "external", "summary": "SUSE Bug 1221084 for CVE-2023-52589", "url": "https://bugzilla.suse.com/1221084" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52589" }, { "cve": "CVE-2023-52590", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52590" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change ocfs2 rename code to avoid touching renamed directory if\nits parent does not change as without locking that can corrupt the\nfilesystem.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52590", "url": "https://www.suse.com/security/cve/CVE-2023-52590" }, { "category": "external", "summary": "SUSE Bug 1221088 for CVE-2023-52590", "url": "https://bugzilla.suse.com/1221088" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52590" }, { "cve": "CVE-2023-52591", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52591" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nreiserfs: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change reiserfs rename code to avoid touching renamed directory\nif its parent does not change as without locking that can corrupt the\nfilesystem.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52591", "url": "https://www.suse.com/security/cve/CVE-2023-52591" }, { "category": "external", "summary": "SUSE Bug 1221044 for CVE-2023-52591", "url": "https://bugzilla.suse.com/1221044" }, { "category": "external", "summary": "SUSE Bug 1221578 for CVE-2023-52591", "url": "https://bugzilla.suse.com/1221578" }, { "category": "external", "summary": "SUSE Bug 1221598 for CVE-2023-52591", "url": "https://bugzilla.suse.com/1221598" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2023-52591" }, { "cve": "CVE-2023-52593", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52593" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince \u0027ieee80211_beacon_get()\u0027 can return NULL, \u0027wfx_set_mfp_ap()\u0027\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from \u0027wfx_start_ap()\u0027 as well. Compile tested only.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52593", "url": "https://www.suse.com/security/cve/CVE-2023-52593" }, { "category": "external", "summary": "SUSE Bug 1221042 for CVE-2023-52593", "url": "https://bugzilla.suse.com/1221042" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52593" }, { "cve": "CVE-2023-52614", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52614" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Fix buffer overflow in trans_stat_show\n\nFix buffer overflow in trans_stat_show().\n\nConvert simple snprintf to the more secure scnprintf with size of\nPAGE_SIZE.\n\nAdd condition checking if we are exceeding PAGE_SIZE and exit early from\nloop. Also add at the end a warning that we exceeded PAGE_SIZE and that\nstats is disabled.\n\nReturn -EFBIG in the case where we don\u0027t have enough space to write the\nfull transition table.\n\nAlso document in the ABI that this function can return -EFBIG error.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52614", "url": "https://www.suse.com/security/cve/CVE-2023-52614" }, { "category": "external", "summary": "SUSE Bug 1221617 for CVE-2023-52614", "url": "https://bugzilla.suse.com/1221617" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52614" }, { "cve": "CVE-2023-52616", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52616" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init\n\nWhen the mpi_ec_ctx structure is initialized, some fields are not\ncleared, causing a crash when referencing the field when the\nstructure was released. Initially, this issue was ignored because\nmemory for mpi_ec_ctx is allocated with the __GFP_ZERO flag.\nFor example, this error will be triggered when calculating the\nZa value for SM2 separately.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52616", "url": "https://www.suse.com/security/cve/CVE-2023-52616" }, { "category": "external", "summary": "SUSE Bug 1221612 for CVE-2023-52616", "url": "https://bugzilla.suse.com/1221612" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52616" }, { "cve": "CVE-2023-52620", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52620" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: disallow timeout for anonymous sets\n\nNever used from userspace, disallow these parameters.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52620", "url": "https://www.suse.com/security/cve/CVE-2023-52620" }, { "category": "external", "summary": "SUSE Bug 1221825 for CVE-2023-52620", "url": "https://bugzilla.suse.com/1221825" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52620" }, { "cve": "CVE-2023-52635", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52635" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Synchronize devfreq_monitor_[start/stop]\n\nThere is a chance if a frequent switch of the governor\ndone in a loop result in timer list corruption where\ntimer cancel being done from two place one from\ncancel_delayed_work_sync() and followed by expire_timers()\ncan be seen from the traces[1].\n\nwhile true\ndo\n echo \"simple_ondemand\" \u003e /sys/class/devfreq/1d84000.ufshc/governor\n echo \"performance\" \u003e /sys/class/devfreq/1d84000.ufshc/governor\ndone\n\nIt looks to be issue with devfreq driver where\ndevice_monitor_[start/stop] need to synchronized so that\ndelayed work should get corrupted while it is either\nbeing queued or running or being cancelled.\n\nLet\u0027s use polling flag and devfreq lock to synchronize the\nqueueing the timer instance twice and work data being\ncorrupted.\n\n[1]\n...\n..\n\u003cidle\u003e-0 [003] 9436.209662: timer_cancel timer=0xffffff80444f0428\n\u003cidle\u003e-0 [003] 9436.209664: timer_expire_entry timer=0xffffff80444f0428 now=0x10022da1c function=__typeid__ZTSFvP10timer_listE_global_addr baseclk=0x10022da1c\n\u003cidle\u003e-0 [003] 9436.209718: timer_expire_exit timer=0xffffff80444f0428\nkworker/u16:6-14217 [003] 9436.209863: timer_start timer=0xffffff80444f0428 function=__typeid__ZTSFvP10timer_listE_global_addr expires=0x10022da2b now=0x10022da1c flags=182452227\nvendor.xxxyyy.ha-1593 [004] 9436.209888: timer_cancel timer=0xffffff80444f0428\nvendor.xxxyyy.ha-1593 [004] 9436.216390: timer_init timer=0xffffff80444f0428\nvendor.xxxyyy.ha-1593 [004] 9436.216392: timer_start timer=0xffffff80444f0428 function=__typeid__ZTSFvP10timer_listE_global_addr expires=0x10022da2c now=0x10022da1d flags=186646532\nvendor.xxxyyy.ha-1593 [005] 9436.220992: timer_cancel timer=0xffffff80444f0428\nxxxyyyTraceManag-7795 [004] 9436.261641: timer_cancel timer=0xffffff80444f0428\n\n[2]\n\n 9436.261653][ C4] Unable to handle kernel paging request at virtual address dead00000000012a\n[ 9436.261664][ C4] Mem abort info:\n[ 9436.261666][ C4] ESR = 0x96000044\n[ 9436.261669][ C4] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 9436.261671][ C4] SET = 0, FnV = 0\n[ 9436.261673][ C4] EA = 0, S1PTW = 0\n[ 9436.261675][ C4] Data abort info:\n[ 9436.261677][ C4] ISV = 0, ISS = 0x00000044\n[ 9436.261680][ C4] CM = 0, WnR = 1\n[ 9436.261682][ C4] [dead00000000012a] address between user and kernel address ranges\n[ 9436.261685][ C4] Internal error: Oops: 96000044 [#1] PREEMPT SMP\n[ 9436.261701][ C4] Skip md ftrace buffer dump for: 0x3a982d0\n...\n\n[ 9436.262138][ C4] CPU: 4 PID: 7795 Comm: TraceManag Tainted: G S W O 5.10.149-android12-9-o-g17f915d29d0c #1\n[ 9436.262141][ C4] Hardware name: Qualcomm Technologies, Inc. (DT)\n[ 9436.262144][ C4] pstate: 22400085 (nzCv daIf +PAN -UAO +TCO BTYPE=--)\n[ 9436.262161][ C4] pc : expire_timers+0x9c/0x438\n[ 9436.262164][ C4] lr : expire_timers+0x2a4/0x438\n[ 9436.262168][ C4] sp : ffffffc010023dd0\n[ 9436.262171][ C4] x29: ffffffc010023df0 x28: ffffffd0636fdc18\n[ 9436.262178][ C4] x27: ffffffd063569dd0 x26: ffffffd063536008\n[ 9436.262182][ C4] x25: 0000000000000001 x24: ffffff88f7c69280\n[ 9436.262185][ C4] x23: 00000000000000e0 x22: dead000000000122\n[ 9436.262188][ C4] x21: 000000010022da29 x20: ffffff8af72b4e80\n[ 9436.262191][ C4] x19: ffffffc010023e50 x18: ffffffc010025038\n[ 9436.262195][ C4] x17: 0000000000000240 x16: 0000000000000201\n[ 9436.262199][ C4] x15: ffffffffffffffff x14: ffffff889f3c3100\n[ 9436.262203][ C4] x13: ffffff889f3c3100 x12: 00000000049f56b8\n[ 9436.262207][ C4] x11: 00000000049f56b8 x10: 00000000ffffffff\n[ 9436.262212][ C4] x9 : ffffffc010023e50 x8 : dead000000000122\n[ 9436.262216][ C4] x7 : ffffffffffffffff x6 : ffffffc0100239d8\n[ 9436.262220][ C4] x5 : 0000000000000000 x4 : 0000000000000101\n[ 9436.262223][ C4] x3 : 0000000000000080 x2 : ffffff8\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52635", "url": "https://www.suse.com/security/cve/CVE-2023-52635" }, { "category": "external", "summary": "SUSE Bug 1222294 for CVE-2023-52635", "url": "https://bugzilla.suse.com/1222294" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52635" }, { "cve": "CVE-2023-52645", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52645" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: mediatek: fix race conditions with genpd\n\nIf the power domains are registered first with genpd and *after that*\nthe driver attempts to power them on in the probe sequence, then it is\npossible that a race condition occurs if genpd tries to power them on\nin the same time.\nThe same is valid for powering them off before unregistering them\nfrom genpd.\nAttempt to fix race conditions by first removing the domains from genpd\nand *after that* powering down domains.\nAlso first power up the domains and *after that* register them\nto genpd.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52645", "url": "https://www.suse.com/security/cve/CVE-2023-52645" }, { "category": "external", "summary": "SUSE Bug 1223033 for CVE-2023-52645", "url": "https://bugzilla.suse.com/1223033" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52645" }, { "cve": "CVE-2023-52646", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52646" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naio: fix mremap after fork null-deref\n\nCommit e4a0d3e720e7 (\"aio: Make it possible to remap aio ring\") introduced\na null-deref if mremap is called on an old aio mapping after fork as\nmm-\u003eioctx_table will be set to NULL.\n\n[jmoyer@redhat.com: fix 80 column issue]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52646", "url": "https://www.suse.com/security/cve/CVE-2023-52646" }, { "category": "external", "summary": "SUSE Bug 1223432 for CVE-2023-52646", "url": "https://bugzilla.suse.com/1223432" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52646" }, { "cve": "CVE-2023-52652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-52652" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNTB: fix possible name leak in ntb_register_device()\n\nIf device_register() fails in ntb_register_device(), the device name\nallocated by dev_set_name() should be freed. As per the comment in\ndevice_register(), callers should use put_device() to give up the\nreference in the error path. So fix this by calling put_device() in the\nerror path so that the name can be freed in kobject_cleanup().\n\nAs a result of this, put_device() in the error path of\nntb_register_device() is removed and the actual error is returned.\n\n[mani: reworded commit message]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-52652", "url": "https://www.suse.com/security/cve/CVE-2023-52652" }, { "category": "external", "summary": "SUSE Bug 1223686 for CVE-2023-52652", "url": "https://bugzilla.suse.com/1223686" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-52652" }, { "cve": "CVE-2023-6270", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-6270" } ], "notes": [ { "category": "general", "text": "A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-6270", "url": "https://www.suse.com/security/cve/CVE-2023-6270" }, { "category": "external", "summary": "SUSE Bug 1218562 for CVE-2023-6270", "url": "https://bugzilla.suse.com/1218562" }, { "category": "external", "summary": "SUSE Bug 1218813 for CVE-2023-6270", "url": "https://bugzilla.suse.com/1218813" }, { "category": "external", "summary": "SUSE Bug 1221578 for CVE-2023-6270", "url": "https://bugzilla.suse.com/1221578" }, { "category": "external", "summary": "SUSE Bug 1221598 for CVE-2023-6270", "url": "https://bugzilla.suse.com/1221598" }, { "category": "external", "summary": "SUSE Bug 1223016 for CVE-2023-6270", "url": "https://bugzilla.suse.com/1223016" }, { "category": "external", "summary": "SUSE Bug 1227675 for CVE-2023-6270", "url": "https://bugzilla.suse.com/1227675" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2023-6270" }, { "cve": "CVE-2024-0639", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-0639" } ], "notes": [ { "category": "general", "text": "A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel\u0027s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-0639", "url": "https://www.suse.com/security/cve/CVE-2024-0639" }, { "category": "external", "summary": "SUSE Bug 1218917 for CVE-2024-0639", "url": "https://bugzilla.suse.com/1218917" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-0639" }, { "cve": "CVE-2024-0841", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-0841" } ], "notes": [ { "category": "general", "text": "A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-0841", "url": "https://www.suse.com/security/cve/CVE-2024-0841" }, { "category": "external", "summary": "SUSE Bug 1219264 for CVE-2024-0841", "url": "https://bugzilla.suse.com/1219264" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-0841" }, { "cve": "CVE-2024-2201", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-2201" } ], "notes": [ { "category": "general", "text": "A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-2201", "url": "https://www.suse.com/security/cve/CVE-2024-2201" }, { "category": "external", "summary": "SUSE Bug 1212111 for CVE-2024-2201", "url": "https://bugzilla.suse.com/1212111" }, { "category": "external", "summary": "SUSE Bug 1217339 for CVE-2024-2201", "url": "https://bugzilla.suse.com/1217339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-2201" }, { "cve": "CVE-2024-22099", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22099" } ], "notes": [ { "category": "general", "text": "NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.\n\nThis issue affects Linux kernel: v2.6.12-rc2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22099", "url": "https://www.suse.com/security/cve/CVE-2024-22099" }, { "category": "external", "summary": "SUSE Bug 1219170 for CVE-2024-22099", "url": "https://bugzilla.suse.com/1219170" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-22099" }, { "cve": "CVE-2024-23307", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23307" } ], "notes": [ { "category": "general", "text": "Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23307", "url": "https://www.suse.com/security/cve/CVE-2024-23307" }, { "category": "external", "summary": "SUSE Bug 1219169 for CVE-2024-23307", "url": "https://bugzilla.suse.com/1219169" }, { "category": "external", "summary": "SUSE Bug 1220145 for CVE-2024-23307", "url": "https://bugzilla.suse.com/1220145" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-23307" }, { "cve": "CVE-2024-23848", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23848" } ], "notes": [ { "category": "general", "text": "In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23848", "url": "https://www.suse.com/security/cve/CVE-2024-23848" }, { "category": "external", "summary": "SUSE Bug 1219104 for CVE-2024-23848", "url": "https://bugzilla.suse.com/1219104" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-23848" }, { "cve": "CVE-2024-23850", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23850" } ], "notes": [ { "category": "general", "text": "In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23850", "url": "https://www.suse.com/security/cve/CVE-2024-23850" }, { "category": "external", "summary": "SUSE Bug 1219126 for CVE-2024-23850", "url": "https://bugzilla.suse.com/1219126" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-23850" }, { "cve": "CVE-2024-26601", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26601" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: regenerate buddy after block freeing failed if under fc replay\n\nThis mostly reverts commit 6bd97bf273bd (\"ext4: remove redundant\nmb_regenerate_buddy()\") and reintroduces mb_regenerate_buddy(). Based on\ncode in mb_free_blocks(), fast commit replay can end up marking as free\nblocks that are already marked as such. This causes corruption of the\nbuddy bitmap so we need to regenerate it in that case.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26601", "url": "https://www.suse.com/security/cve/CVE-2024-26601" }, { "category": "external", "summary": "SUSE Bug 1220342 for CVE-2024-26601", "url": "https://bugzilla.suse.com/1220342" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26601" }, { "cve": "CVE-2024-26610", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26610" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: fix a memory corruption\n\niwl_fw_ini_trigger_tlv::data is a pointer to a __le32, which means that\nif we copy to iwl_fw_ini_trigger_tlv::data + offset while offset is in\nbytes, we\u0027ll write past the buffer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26610", "url": "https://www.suse.com/security/cve/CVE-2024-26610" }, { "category": "external", "summary": "SUSE Bug 1221299 for CVE-2024-26610", "url": "https://bugzilla.suse.com/1221299" }, { "category": "external", "summary": "SUSE Bug 1221302 for CVE-2024-26610", "url": "https://bugzilla.suse.com/1221302" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-26610" }, { "cve": "CVE-2024-26656", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26656" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix use-after-free bug\n\nThe bug can be triggered by sending a single amdgpu_gem_userptr_ioctl\nto the AMDGPU DRM driver on any ASICs with an invalid address and size.\nThe bug was reported by Joonkyo Jung \u003cjoonkyoj@yonsei.ac.kr\u003e.\nFor example the following code:\n\nstatic void Syzkaller1(int fd)\n{\n\tstruct drm_amdgpu_gem_userptr arg;\n\tint ret;\n\n\targ.addr = 0xffffffffffff0000;\n\targ.size = 0x80000000; /*2 Gb*/\n\targ.flags = 0x7;\n\tret = drmIoctl(fd, 0xc1186451/*amdgpu_gem_userptr_ioctl*/, \u0026arg);\n}\n\nDue to the address and size are not valid there is a failure in\namdgpu_hmm_register-\u003emmu_interval_notifier_insert-\u003e__mmu_interval_notifier_insert-\u003e\ncheck_shl_overflow, but we even the amdgpu_hmm_register failure we still call\namdgpu_hmm_unregister into amdgpu_gem_object_free which causes access to a bad address.\nThe following stack is below when the issue is reproduced when Kazan is enabled:\n\n[ +0.000014] Hardware name: ASUS System Product Name/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 12/03/2020\n[ +0.000009] RIP: 0010:mmu_interval_notifier_remove+0x327/0x340\n[ +0.000017] Code: ff ff 49 89 44 24 08 48 b8 00 01 00 00 00 00 ad de 4c 89 f7 49 89 47 40 48 83 c0 22 49 89 47 48 e8 ce d1 2d 01 e9 32 ff ff ff \u003c0f\u003e 0b e9 16 ff ff ff 4c 89 ef e8 fa 14 b3 ff e9 36 ff ff ff e8 80\n[ +0.000014] RSP: 0018:ffffc90002657988 EFLAGS: 00010246\n[ +0.000013] RAX: 0000000000000000 RBX: 1ffff920004caf35 RCX: ffffffff8160565b\n[ +0.000011] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff8881a9f78260\n[ +0.000010] RBP: ffffc90002657a70 R08: 0000000000000001 R09: fffff520004caf25\n[ +0.000010] R10: 0000000000000003 R11: ffffffff8161d1d6 R12: ffff88810e988c00\n[ +0.000010] R13: ffff888126fb5a00 R14: ffff88810e988c0c R15: ffff8881a9f78260\n[ +0.000011] FS: 00007ff9ec848540(0000) GS:ffff8883cc880000(0000) knlGS:0000000000000000\n[ +0.000012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ +0.000010] CR2: 000055b3f7e14328 CR3: 00000001b5770000 CR4: 0000000000350ef0\n[ +0.000010] Call Trace:\n[ +0.000006] \u003cTASK\u003e\n[ +0.000007] ? show_regs+0x6a/0x80\n[ +0.000018] ? __warn+0xa5/0x1b0\n[ +0.000019] ? mmu_interval_notifier_remove+0x327/0x340\n[ +0.000018] ? report_bug+0x24a/0x290\n[ +0.000022] ? handle_bug+0x46/0x90\n[ +0.000015] ? exc_invalid_op+0x19/0x50\n[ +0.000016] ? asm_exc_invalid_op+0x1b/0x20\n[ +0.000017] ? kasan_save_stack+0x26/0x50\n[ +0.000017] ? mmu_interval_notifier_remove+0x23b/0x340\n[ +0.000019] ? mmu_interval_notifier_remove+0x327/0x340\n[ +0.000019] ? mmu_interval_notifier_remove+0x23b/0x340\n[ +0.000020] ? __pfx_mmu_interval_notifier_remove+0x10/0x10\n[ +0.000017] ? kasan_save_alloc_info+0x1e/0x30\n[ +0.000018] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? __kasan_kmalloc+0xb1/0xc0\n[ +0.000018] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_read+0x11/0x20\n[ +0.000020] amdgpu_hmm_unregister+0x34/0x50 [amdgpu]\n[ +0.004695] amdgpu_gem_object_free+0x66/0xa0 [amdgpu]\n[ +0.004534] ? __pfx_amdgpu_gem_object_free+0x10/0x10 [amdgpu]\n[ +0.004291] ? do_syscall_64+0x5f/0xe0\n[ +0.000023] ? srso_return_thunk+0x5/0x5f\n[ +0.000017] drm_gem_object_free+0x3b/0x50 [drm]\n[ +0.000489] amdgpu_gem_userptr_ioctl+0x306/0x500 [amdgpu]\n[ +0.004295] ? __pfx_amdgpu_gem_userptr_ioctl+0x10/0x10 [amdgpu]\n[ +0.004270] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? __this_cpu_preempt_check+0x13/0x20\n[ +0.000015] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? sysvec_apic_timer_interrupt+0x57/0xc0\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20\n[ +0.000022] ? drm_ioctl_kernel+0x17b/0x1f0 [drm]\n[ +0.000496] ? __pfx_amdgpu_gem_userptr_ioctl+0x10/0x10 [amdgpu]\n[ +0.004272] ? drm_ioctl_kernel+0x190/0x1f0 [drm]\n[ +0.000492] drm_ioctl_kernel+0x140/0x1f0 [drm]\n[ +0.000497] ? __pfx_amdgpu_gem_userptr_ioctl+0x10/0x10 [amdgpu]\n[ +0.004297] ? __pfx_drm_ioctl_kernel+0x10/0x10 [d\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26656", "url": "https://www.suse.com/security/cve/CVE-2024-26656" }, { "category": "external", "summary": "SUSE Bug 1222307 for CVE-2024-26656", "url": "https://bugzilla.suse.com/1222307" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26656" }, { "cve": "CVE-2024-26671", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26671" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-mq: fix IO hang from sbitmap wakeup race\n\nIn blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered\nwith the following blk_mq_get_driver_tag() in case of getting driver\ntag failure.\n\nThen in __sbitmap_queue_wake_up(), waitqueue_active() may not observe\nthe added waiter in blk_mq_mark_tag_wait() and wake up nothing, meantime\nblk_mq_mark_tag_wait() can\u0027t get driver tag successfully.\n\nThis issue can be reproduced by running the following test in loop, and\nfio hang can be observed in \u003c 30min when running it on my test VM\nin laptop.\n\n\tmodprobe -r scsi_debug\n\tmodprobe scsi_debug delay=0 dev_size_mb=4096 max_queue=1 host_max_queue=1 submit_queues=4\n\tdev=`ls -d /sys/bus/pseudo/drivers/scsi_debug/adapter*/host*/target*/*/block/* | head -1 | xargs basename`\n\tfio --filename=/dev/\"$dev\" --direct=1 --rw=randrw --bs=4k --iodepth=1 \\\n \t\t--runtime=100 --numjobs=40 --time_based --name=test \\\n \t--ioengine=libaio\n\nFix the issue by adding one explicit barrier in blk_mq_mark_tag_wait(), which\nis just fine in case of running out of tag.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26671", "url": "https://www.suse.com/security/cve/CVE-2024-26671" }, { "category": "external", "summary": "SUSE Bug 1222357 for CVE-2024-26671", "url": "https://bugzilla.suse.com/1222357" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26671" }, { "cve": "CVE-2024-26673", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26673" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations\n\n- Disallow families other than NFPROTO_{IPV4,IPV6,INET}.\n- Disallow layer 4 protocol with no ports, since destination port is a\n mandatory attribute for this object.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26673", "url": "https://www.suse.com/security/cve/CVE-2024-26673" }, { "category": "external", "summary": "SUSE Bug 1222368 for CVE-2024-26673", "url": "https://bugzilla.suse.com/1222368" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26673" }, { "cve": "CVE-2024-26675", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26675" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nppp_async: limit MRU to 64K\n\nsyzbot triggered a warning [1] in __alloc_pages():\n\nWARN_ON_ONCE_GFP(order \u003e MAX_PAGE_ORDER, gfp)\n\nWillem fixed a similar issue in commit c0a2a1b0d631 (\"ppp: limit MRU to 64K\")\n\nAdopt the same sanity check for ppp_async_ioctl(PPPIOCSMRU)\n\n[1]:\n\n WARNING: CPU: 1 PID: 11 at mm/page_alloc.c:4543 __alloc_pages+0x308/0x698 mm/page_alloc.c:4543\nModules linked in:\nCPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted 6.8.0-rc2-syzkaller-g41bccc98fb79 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\nWorkqueue: events_unbound flush_to_ldisc\npstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : __alloc_pages+0x308/0x698 mm/page_alloc.c:4543\n lr : __alloc_pages+0xc8/0x698 mm/page_alloc.c:4537\nsp : ffff800093967580\nx29: ffff800093967660 x28: ffff8000939675a0 x27: dfff800000000000\nx26: ffff70001272ceb4 x25: 0000000000000000 x24: ffff8000939675c0\nx23: 0000000000000000 x22: 0000000000060820 x21: 1ffff0001272ceb8\nx20: ffff8000939675e0 x19: 0000000000000010 x18: ffff800093967120\nx17: ffff800083bded5c x16: ffff80008ac97500 x15: 0000000000000005\nx14: 1ffff0001272cebc x13: 0000000000000000 x12: 0000000000000000\nx11: ffff70001272cec1 x10: 1ffff0001272cec0 x9 : 0000000000000001\nx8 : ffff800091c91000 x7 : 0000000000000000 x6 : 000000000000003f\nx5 : 00000000ffffffff x4 : 0000000000000000 x3 : 0000000000000020\nx2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff8000939675e0\nCall trace:\n __alloc_pages+0x308/0x698 mm/page_alloc.c:4543\n __alloc_pages_node include/linux/gfp.h:238 [inline]\n alloc_pages_node include/linux/gfp.h:261 [inline]\n __kmalloc_large_node+0xbc/0x1fc mm/slub.c:3926\n __do_kmalloc_node mm/slub.c:3969 [inline]\n __kmalloc_node_track_caller+0x418/0x620 mm/slub.c:4001\n kmalloc_reserve+0x17c/0x23c net/core/skbuff.c:590\n __alloc_skb+0x1c8/0x3d8 net/core/skbuff.c:651\n __netdev_alloc_skb+0xb8/0x3e8 net/core/skbuff.c:715\n netdev_alloc_skb include/linux/skbuff.h:3235 [inline]\n dev_alloc_skb include/linux/skbuff.h:3248 [inline]\n ppp_async_input drivers/net/ppp/ppp_async.c:863 [inline]\n ppp_asynctty_receive+0x588/0x186c drivers/net/ppp/ppp_async.c:341\n tty_ldisc_receive_buf+0x12c/0x15c drivers/tty/tty_buffer.c:390\n tty_port_default_receive_buf+0x74/0xac drivers/tty/tty_port.c:37\n receive_buf drivers/tty/tty_buffer.c:444 [inline]\n flush_to_ldisc+0x284/0x6e4 drivers/tty/tty_buffer.c:494\n process_one_work+0x694/0x1204 kernel/workqueue.c:2633\n process_scheduled_works kernel/workqueue.c:2706 [inline]\n worker_thread+0x938/0xef4 kernel/workqueue.c:2787\n kthread+0x288/0x310 kernel/kthread.c:388\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26675", "url": "https://www.suse.com/security/cve/CVE-2024-26675" }, { "category": "external", "summary": "SUSE Bug 1222379 for CVE-2024-26675", "url": "https://bugzilla.suse.com/1222379" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26675" }, { "cve": "CVE-2024-26679", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26679" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: read sk-\u003esk_family once in inet_recv_error()\n\ninet_recv_error() is called without holding the socket lock.\n\nIPv6 socket could mutate to IPv4 with IPV6_ADDRFORM\nsocket option and trigger a KCSAN warning.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26679", "url": "https://www.suse.com/security/cve/CVE-2024-26679" }, { "category": "external", "summary": "SUSE Bug 1222385 for CVE-2024-26679", "url": "https://bugzilla.suse.com/1222385" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26679" }, { "cve": "CVE-2024-26687", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26687" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/events: close evtchn after mapping cleanup\n\nshutdown_pirq and startup_pirq are not taking the\nirq_mapping_update_lock because they can\u0027t due to lock inversion. Both\nare called with the irq_desc-\u003elock being taking. The lock order,\nhowever, is first irq_mapping_update_lock and then irq_desc-\u003elock.\n\nThis opens multiple races:\n- shutdown_pirq can be interrupted by a function that allocates an event\n channel:\n\n CPU0 CPU1\n shutdown_pirq {\n xen_evtchn_close(e)\n __startup_pirq {\n EVTCHNOP_bind_pirq\n -\u003e returns just freed evtchn e\n set_evtchn_to_irq(e, irq)\n }\n xen_irq_info_cleanup() {\n set_evtchn_to_irq(e, -1)\n }\n }\n\n Assume here event channel e refers here to the same event channel\n number.\n After this race the evtchn_to_irq mapping for e is invalid (-1).\n\n- __startup_pirq races with __unbind_from_irq in a similar way. Because\n __startup_pirq doesn\u0027t take irq_mapping_update_lock it can grab the\n evtchn that __unbind_from_irq is currently freeing and cleaning up. In\n this case even though the event channel is allocated, its mapping can\n be unset in evtchn_to_irq.\n\nThe fix is to first cleanup the mappings and then close the event\nchannel. In this way, when an event channel gets allocated it\u0027s\npotential previous evtchn_to_irq mappings are guaranteed to be unset already.\nThis is also the reverse order of the allocation where first the event\nchannel is allocated and then the mappings are setup.\n\nOn a 5.10 kernel prior to commit 3fcdaf3d7634 (\"xen/events: modify internal\n[un]bind interfaces\"), we hit a BUG like the following during probing of NVMe\ndevices. The issue is that during nvme_setup_io_queues, pci_free_irq\nis called for every device which results in a call to shutdown_pirq.\nWith many nvme devices it\u0027s therefore likely to hit this race during\nboot because there will be multiple calls to shutdown_pirq and\nstartup_pirq are running potentially in parallel.\n\n ------------[ cut here ]------------\n blkfront: xvda: barrier or flush: disabled; persistent grants: enabled; indirect descriptors: enabled; bounce buffer: enabled\n kernel BUG at drivers/xen/events/events_base.c:499!\n invalid opcode: 0000 [#1] SMP PTI\n CPU: 44 PID: 375 Comm: kworker/u257:23 Not tainted 5.10.201-191.748.amzn2.x86_64 #1\n Hardware name: Xen HVM domU, BIOS 4.11.amazon 08/24/2006\n Workqueue: nvme-reset-wq nvme_reset_work\n RIP: 0010:bind_evtchn_to_cpu+0xdf/0xf0\n Code: 5d 41 5e c3 cc cc cc cc 44 89 f7 e8 2b 55 ad ff 49 89 c5 48 85 c0 0f 84 64 ff ff ff 4c 8b 68 30 41 83 fe ff 0f 85 60 ff ff ff \u003c0f\u003e 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00\n RSP: 0000:ffffc9000d533b08 EFLAGS: 00010046\n RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000006\n RDX: 0000000000000028 RSI: 00000000ffffffff RDI: 00000000ffffffff\n RBP: ffff888107419680 R08: 0000000000000000 R09: ffffffff82d72b00\n R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000001ed\n R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000002\n FS: 0000000000000000(0000) GS:ffff88bc8b500000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000000 CR3: 0000000002610001 CR4: 00000000001706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n ? show_trace_log_lvl+0x1c1/0x2d9\n ? show_trace_log_lvl+0x1c1/0x2d9\n ? set_affinity_irq+0xdc/0x1c0\n ? __die_body.cold+0x8/0xd\n ? die+0x2b/0x50\n ? do_trap+0x90/0x110\n ? bind_evtchn_to_cpu+0xdf/0xf0\n ? do_error_trap+0x65/0x80\n ? bind_evtchn_to_cpu+0xdf/0xf0\n ? exc_invalid_op+0x4e/0x70\n ? bind_evtchn_to_cpu+0xdf/0xf0\n ? asm_exc_invalid_op+0x12/0x20\n ? bind_evtchn_to_cpu+0xdf/0x\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26687", "url": "https://www.suse.com/security/cve/CVE-2024-26687" }, { "category": "external", "summary": "SUSE Bug 1222435 for CVE-2024-26687", "url": "https://bugzilla.suse.com/1222435" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26687" }, { "cve": "CVE-2024-26688", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26688" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super\n\nWhen configuring a hugetlb filesystem via the fsconfig() syscall, there is\na possible NULL dereference in hugetlbfs_fill_super() caused by assigning\nNULL to ctx-\u003ehstate in hugetlbfs_parse_param() when the requested pagesize\nis non valid.\n\nE.g: Taking the following steps:\n\n fd = fsopen(\"hugetlbfs\", FSOPEN_CLOEXEC);\n fsconfig(fd, FSCONFIG_SET_STRING, \"pagesize\", \"1024\", 0);\n fsconfig(fd, FSCONFIG_CMD_CREATE, NULL, NULL, 0);\n\nGiven that the requested \"pagesize\" is invalid, ctxt-\u003ehstate will be replaced\nwith NULL, losing its previous value, and we will print an error:\n\n ...\n ...\n case Opt_pagesize:\n ps = memparse(param-\u003estring, \u0026rest);\n ctx-\u003ehstate = h;\n if (!ctx-\u003ehstate) {\n pr_err(\"Unsupported page size %lu MB\\n\", ps / SZ_1M);\n return -EINVAL;\n }\n return 0;\n ...\n ...\n\nThis is a problem because later on, we will dereference ctxt-\u003ehstate in\nhugetlbfs_fill_super()\n\n ...\n ...\n sb-\u003es_blocksize = huge_page_size(ctx-\u003ehstate);\n ...\n ...\n\nCausing below Oops.\n\nFix this by replacing cxt-\u003ehstate value only when then pagesize is known\nto be valid.\n\n kernel: hugetlbfs: Unsupported page size 0 MB\n kernel: BUG: kernel NULL pointer dereference, address: 0000000000000028\n kernel: #PF: supervisor read access in kernel mode\n kernel: #PF: error_code(0x0000) - not-present page\n kernel: PGD 800000010f66c067 P4D 800000010f66c067 PUD 1b22f8067 PMD 0\n kernel: Oops: 0000 [#1] PREEMPT SMP PTI\n kernel: CPU: 4 PID: 5659 Comm: syscall Tainted: G E 6.8.0-rc2-default+ #22 5a47c3fef76212addcc6eb71344aabc35190ae8f\n kernel: Hardware name: Intel Corp. GROVEPORT/GROVEPORT, BIOS GVPRCRB1.86B.0016.D04.1705030402 05/03/2017\n kernel: RIP: 0010:hugetlbfs_fill_super+0xb4/0x1a0\n kernel: Code: 48 8b 3b e8 3e c6 ed ff 48 85 c0 48 89 45 20 0f 84 d6 00 00 00 48 b8 ff ff ff ff ff ff ff 7f 4c 89 e7 49 89 44 24 20 48 8b 03 \u003c8b\u003e 48 28 b8 00 10 00 00 48 d3 e0 49 89 44 24 18 48 8b 03 8b 40 28\n kernel: RSP: 0018:ffffbe9960fcbd48 EFLAGS: 00010246\n kernel: RAX: 0000000000000000 RBX: ffff9af5272ae780 RCX: 0000000000372004\n kernel: RDX: ffffffffffffffff RSI: ffffffffffffffff RDI: ffff9af555e9b000\n kernel: RBP: ffff9af52ee66b00 R08: 0000000000000040 R09: 0000000000370004\n kernel: R10: ffffbe9960fcbd48 R11: 0000000000000040 R12: ffff9af555e9b000\n kernel: R13: ffffffffa66b86c0 R14: ffff9af507d2f400 R15: ffff9af507d2f400\n kernel: FS: 00007ffbc0ba4740(0000) GS:ffff9b0bd7000000(0000) knlGS:0000000000000000\n kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n kernel: CR2: 0000000000000028 CR3: 00000001b1ee0000 CR4: 00000000001506f0\n kernel: Call Trace:\n kernel: \u003cTASK\u003e\n kernel: ? __die_body+0x1a/0x60\n kernel: ? page_fault_oops+0x16f/0x4a0\n kernel: ? search_bpf_extables+0x65/0x70\n kernel: ? fixup_exception+0x22/0x310\n kernel: ? exc_page_fault+0x69/0x150\n kernel: ? asm_exc_page_fault+0x22/0x30\n kernel: ? __pfx_hugetlbfs_fill_super+0x10/0x10\n kernel: ? hugetlbfs_fill_super+0xb4/0x1a0\n kernel: ? hugetlbfs_fill_super+0x28/0x1a0\n kernel: ? __pfx_hugetlbfs_fill_super+0x10/0x10\n kernel: vfs_get_super+0x40/0xa0\n kernel: ? __pfx_bpf_lsm_capable+0x10/0x10\n kernel: vfs_get_tree+0x25/0xd0\n kernel: vfs_cmd_create+0x64/0xe0\n kernel: __x64_sys_fsconfig+0x395/0x410\n kernel: do_syscall_64+0x80/0x160\n kernel: ? syscall_exit_to_user_mode+0x82/0x240\n kernel: ? do_syscall_64+0x8d/0x160\n kernel: ? syscall_exit_to_user_mode+0x82/0x240\n kernel: ? do_syscall_64+0x8d/0x160\n kernel: ? exc_page_fault+0x69/0x150\n kernel: entry_SYSCALL_64_after_hwframe+0x6e/0x76\n kernel: RIP: 0033:0x7ffbc0cb87c9\n kernel: Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 97 96 0d 00 f7 d8 64 89 01 48\n kernel: RSP: 002b:00007ffc29d2f388 EFLAGS: 00000206 ORIG_RAX: 00000000000001af\n kernel: RAX: fffffffffff\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26688", "url": "https://www.suse.com/security/cve/CVE-2024-26688" }, { "category": "external", "summary": "SUSE Bug 1222482 for CVE-2024-26688", "url": "https://bugzilla.suse.com/1222482" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26688" }, { "cve": "CVE-2024-26700", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26700" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix MST Null Ptr for RV\n\nThe change try to fix below error specific to RV platform:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000008\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 4 PID: 917 Comm: sway Not tainted 6.3.9-arch1-1 #1 124dc55df4f5272ccb409f39ef4872fc2b3376a2\nHardware name: LENOVO 20NKS01Y00/20NKS01Y00, BIOS R12ET61W(1.31 ) 07/28/2022\nRIP: 0010:drm_dp_atomic_find_time_slots+0x5e/0x260 [drm_display_helper]\nCode: 01 00 00 48 8b 85 60 05 00 00 48 63 80 88 00 00 00 3b 43 28 0f 8d 2e 01 00 00 48 8b 53 30 48 8d 04 80 48 8d 04 c2 48 8b 40 18 \u003c48\u003e 8\u003e\nRSP: 0018:ffff960cc2df77d8 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffff8afb87e81280 RCX: 0000000000000224\nRDX: ffff8afb9ee37c00 RSI: ffff8afb8da1a578 RDI: ffff8afb87e81280\nRBP: ffff8afb83d67000 R08: 0000000000000001 R09: ffff8afb9652f850\nR10: ffff960cc2df7908 R11: 0000000000000002 R12: 0000000000000000\nR13: ffff8afb8d7688a0 R14: ffff8afb8da1a578 R15: 0000000000000224\nFS: 00007f4dac35ce00(0000) GS:ffff8afe30b00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000008 CR3: 000000010ddc6000 CR4: 00000000003506e0\nCall Trace:\n \u003cTASK\u003e\n ? __die+0x23/0x70\n ? page_fault_oops+0x171/0x4e0\n ? plist_add+0xbe/0x100\n ? exc_page_fault+0x7c/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? drm_dp_atomic_find_time_slots+0x5e/0x260 [drm_display_helper 0e67723696438d8e02b741593dd50d80b44c2026]\n ? drm_dp_atomic_find_time_slots+0x28/0x260 [drm_display_helper 0e67723696438d8e02b741593dd50d80b44c2026]\n compute_mst_dsc_configs_for_link+0x2ff/0xa40 [amdgpu 62e600d2a75e9158e1cd0a243bdc8e6da040c054]\n ? fill_plane_buffer_attributes+0x419/0x510 [amdgpu 62e600d2a75e9158e1cd0a243bdc8e6da040c054]\n compute_mst_dsc_configs_for_state+0x1e1/0x250 [amdgpu 62e600d2a75e9158e1cd0a243bdc8e6da040c054]\n amdgpu_dm_atomic_check+0xecd/0x1190 [amdgpu 62e600d2a75e9158e1cd0a243bdc8e6da040c054]\n drm_atomic_check_only+0x5c5/0xa40\n drm_mode_atomic_ioctl+0x76e/0xbc0\n ? _copy_to_user+0x25/0x30\n ? drm_ioctl+0x296/0x4b0\n ? __pfx_drm_mode_atomic_ioctl+0x10/0x10\n drm_ioctl_kernel+0xcd/0x170\n drm_ioctl+0x26d/0x4b0\n ? __pfx_drm_mode_atomic_ioctl+0x10/0x10\n amdgpu_drm_ioctl+0x4e/0x90 [amdgpu 62e600d2a75e9158e1cd0a243bdc8e6da040c054]\n __x64_sys_ioctl+0x94/0xd0\n do_syscall_64+0x60/0x90\n ? do_syscall_64+0x6c/0x90\n entry_SYSCALL_64_after_hwframe+0x72/0xdc\nRIP: 0033:0x7f4dad17f76f\nCode: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 \u003c89\u003e c\u003e\nRSP: 002b:00007ffd9ae859f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 000055e255a55900 RCX: 00007f4dad17f76f\nRDX: 00007ffd9ae85a90 RSI: 00000000c03864bc RDI: 000000000000000b\nRBP: 00007ffd9ae85a90 R08: 0000000000000003 R09: 0000000000000003\nR10: 0000000000000000 R11: 0000000000000246 R12: 00000000c03864bc\nR13: 000000000000000b R14: 000055e255a7fc60 R15: 000055e255a01eb0\n \u003c/TASK\u003e\nModules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device ccm cmac algif_hash algif_skcipher af_alg joydev mousedev bnep \u003e\n typec libphy k10temp ipmi_msghandler roles i2c_scmi acpi_cpufreq mac_hid nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_mas\u003e\nCR2: 0000000000000008\n---[ end trace 0000000000000000 ]---\nRIP: 0010:drm_dp_atomic_find_time_slots+0x5e/0x260 [drm_display_helper]\nCode: 01 00 00 48 8b 85 60 05 00 00 48 63 80 88 00 00 00 3b 43 28 0f 8d 2e 01 00 00 48 8b 53 30 48 8d 04 80 48 8d 04 c2 48 8b 40 18 \u003c48\u003e 8\u003e\nRSP: 0018:ffff960cc2df77d8 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffff8afb87e81280 RCX: 0000000000000224\nRDX: ffff8afb9ee37c00 RSI: ffff8afb8da1a578 RDI: ffff8afb87e81280\nRBP: ffff8afb83d67000 R08: 0000000000000001 R09: ffff8afb9652f850\nR10: ffff960cc2df7908 R11: 0000000000000002 R12: 0000000000000000\nR13: ffff8afb8d7688a0 R14: ffff8afb8da1a578 R15: 0000000000000224\nFS: 00007f4dac35ce00(0000) GS:ffff8afe30b00000(0000\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26700", "url": "https://www.suse.com/security/cve/CVE-2024-26700" }, { "category": "external", "summary": "SUSE Bug 1222870 for CVE-2024-26700", "url": "https://bugzilla.suse.com/1222870" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26700" }, { "cve": "CVE-2024-26702", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26702" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n\nRecently, we encounter kernel crash in function rm3100_common_probe\ncaused by out of bound access of array rm3100_samp_rates (because of\nunderlying hardware failures). Add boundary check to prevent out of\nbound access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26702", "url": "https://www.suse.com/security/cve/CVE-2024-26702" }, { "category": "external", "summary": "SUSE Bug 1222424 for CVE-2024-26702", "url": "https://bugzilla.suse.com/1222424" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26702" }, { "cve": "CVE-2024-26733", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26733" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narp: Prevent overflow in arp_req_get().\n\nsyzkaller reported an overflown write in arp_req_get(). [0]\n\nWhen ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour\nentry and copies neigh-\u003eha to struct arpreq.arp_ha.sa_data.\n\nThe arp_ha here is struct sockaddr, not struct sockaddr_storage, so\nthe sa_data buffer is just 14 bytes.\n\nIn the splat below, 2 bytes are overflown to the next int field,\narp_flags. We initialise the field just after the memcpy(), so it\u0027s\nnot a problem.\n\nHowever, when dev-\u003eaddr_len is greater than 22 (e.g. MAX_ADDR_LEN),\narp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL)\nin arp_ioctl() before calling arp_req_get().\n\nTo avoid the overflow, let\u0027s limit the max length of memcpy().\n\nNote that commit b5f0de6df6dc (\"net: dev: Convert sa_data to flexible\narray in struct sockaddr\") just silenced syzkaller.\n\n[0]:\nmemcpy: detected field-spanning write (size 16) of single field \"r-\u003earp_ha.sa_data\" at net/ipv4/arp.c:1128 (size 14)\nWARNING: CPU: 0 PID: 144638 at net/ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128\nModules linked in:\nCPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014\nRIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128\nCode: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb \u003c0f\u003e 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6\nRSP: 0018:ffffc900050b7998 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001\nRBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000\nR13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010\nFS: 00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cTASK\u003e\n arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261\n inet_ioctl+0x314/0x3a0 net/ipv4/af_inet.c:981\n sock_do_ioctl+0xdf/0x260 net/socket.c:1204\n sock_ioctl+0x3ef/0x650 net/socket.c:1321\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:870 [inline]\n __se_sys_ioctl fs/ioctl.c:856 [inline]\n __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x37/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x64/0xce\nRIP: 0033:0x7f172b262b8d\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d\nRDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003\nRBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000\n \u003c/TASK\u003e", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26733", "url": "https://www.suse.com/security/cve/CVE-2024-26733" }, { "category": "external", "summary": "SUSE Bug 1222585 for CVE-2024-26733", "url": "https://bugzilla.suse.com/1222585" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26733" }, { "cve": "CVE-2024-26739", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26739" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_mirred: don\u0027t override retval if we already lost the skb\n\nIf we\u0027re redirecting the skb, and haven\u0027t called tcf_mirred_forward(),\nyet, we need to tell the core to drop the skb by setting the retcode\nto SHOT. If we have called tcf_mirred_forward(), however, the skb\nis out of our hands and returning SHOT will lead to UaF.\n\nMove the retval override to the error path which actually need it.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26739", "url": "https://www.suse.com/security/cve/CVE-2024-26739" }, { "category": "external", "summary": "SUSE Bug 1222559 for CVE-2024-26739", "url": "https://bugzilla.suse.com/1222559" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26739" }, { "cve": "CVE-2024-26764", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26764" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio\n\nIf kiocb_set_cancel_fn() is called for I/O submitted via io_uring, the\nfollowing kernel warning appears:\n\nWARNING: CPU: 3 PID: 368 at fs/aio.c:598 kiocb_set_cancel_fn+0x9c/0xa8\nCall trace:\n kiocb_set_cancel_fn+0x9c/0xa8\n ffs_epfile_read_iter+0x144/0x1d0\n io_read+0x19c/0x498\n io_issue_sqe+0x118/0x27c\n io_submit_sqes+0x25c/0x5fc\n __arm64_sys_io_uring_enter+0x104/0xab0\n invoke_syscall+0x58/0x11c\n el0_svc_common+0xb4/0xf4\n do_el0_svc+0x2c/0xb0\n el0_svc+0x2c/0xa4\n el0t_64_sync_handler+0x68/0xb4\n el0t_64_sync+0x1a4/0x1a8\n\nFix this by setting the IOCB_AIO_RW flag for read and write I/O that is\nsubmitted by libaio.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26764", "url": "https://www.suse.com/security/cve/CVE-2024-26764" }, { "category": "external", "summary": "SUSE Bug 1222721 for CVE-2024-26764", "url": "https://bugzilla.suse.com/1222721" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26764" }, { "cve": "CVE-2024-26766", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26766" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one error\n\nUnfortunately the commit `fd8958efe877` introduced another error\ncausing the `descs` array to overflow. This reults in further crashes\neasily reproducible by `sendmsg` system call.\n\n[ 1080.836473] general protection fault, probably for non-canonical address 0x400300015528b00a: 0000 [#1] PREEMPT SMP PTI\n[ 1080.869326] RIP: 0010:hfi1_ipoib_build_ib_tx_headers.constprop.0+0xe1/0x2b0 [hfi1]\n--\n[ 1080.974535] Call Trace:\n[ 1080.976990] \u003cTASK\u003e\n[ 1081.021929] hfi1_ipoib_send_dma_common+0x7a/0x2e0 [hfi1]\n[ 1081.027364] hfi1_ipoib_send_dma_list+0x62/0x270 [hfi1]\n[ 1081.032633] hfi1_ipoib_send+0x112/0x300 [hfi1]\n[ 1081.042001] ipoib_start_xmit+0x2a9/0x2d0 [ib_ipoib]\n[ 1081.046978] dev_hard_start_xmit+0xc4/0x210\n--\n[ 1081.148347] __sys_sendmsg+0x59/0xa0\n\ncrash\u003e ipoib_txreq 0xffff9cfeba229f00\nstruct ipoib_txreq {\n txreq = {\n list = {\n next = 0xffff9cfeba229f00,\n prev = 0xffff9cfeba229f00\n },\n descp = 0xffff9cfeba229f40,\n coalesce_buf = 0x0,\n wait = 0xffff9cfea4e69a48,\n complete = 0xffffffffc0fe0760 \u003chfi1_ipoib_sdma_complete\u003e,\n packet_len = 0x46d,\n tlen = 0x0,\n num_desc = 0x0,\n desc_limit = 0x6,\n next_descq_idx = 0x45c,\n coalesce_idx = 0x0,\n flags = 0x0,\n descs = {{\n qw = {0x8024000120dffb00, 0x4} # SDMA_DESC0_FIRST_DESC_FLAG (bit 63)\n }, {\n qw = { 0x3800014231b108, 0x4}\n }, {\n qw = { 0x310000e4ee0fcf0, 0x8}\n }, {\n qw = { 0x3000012e9f8000, 0x8}\n }, {\n qw = { 0x59000dfb9d0000, 0x8}\n }, {\n qw = { 0x78000e02e40000, 0x8}\n }}\n },\n sdma_hdr = 0x400300015528b000, \u003c\u003c\u003c invalid pointer in the tx request structure\n sdma_status = 0x0, SDMA_DESC0_LAST_DESC_FLAG (bit 62)\n complete = 0x0,\n priv = 0x0,\n txq = 0xffff9cfea4e69880,\n skb = 0xffff9d099809f400\n}\n\nIf an SDMA send consists of exactly 6 descriptors and requires dword\npadding (in the 7th descriptor), the sdma_txreq descriptor array is not\nproperly expanded and the packet will overflow into the container\nstructure. This results in a panic when the send completion runs. The\nexact panic varies depending on what elements of the container structure\nget corrupted. The fix is to use the correct expression in\n_pad_sdma_tx_descs() to test the need to expand the descriptor array.\n\nWith this patch the crashes are no longer reproducible and the machine is\nstable.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26766", "url": "https://www.suse.com/security/cve/CVE-2024-26766" }, { "category": "external", "summary": "SUSE Bug 1222726 for CVE-2024-26766", "url": "https://bugzilla.suse.com/1222726" }, { "category": "external", "summary": "SUSE Bug 1222882 for CVE-2024-26766", "url": "https://bugzilla.suse.com/1222882" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-26766" }, { "cve": "CVE-2024-26772", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26772" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\n\nPlaces the logic for checking if the group\u0027s block bitmap is corrupt under\nthe protection of the group lock to avoid allocating blocks from the group\nwith a corrupted block bitmap.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26772", "url": "https://www.suse.com/security/cve/CVE-2024-26772" }, { "category": "external", "summary": "SUSE Bug 1222613 for CVE-2024-26772", "url": "https://bugzilla.suse.com/1222613" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26772" }, { "cve": "CVE-2024-26773", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26773" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n\nDetermine if the group block bitmap is corrupted before using ac_b_ex in\next4_mb_try_best_found() to avoid allocating blocks from a group with a\ncorrupted block bitmap in the following concurrency and making the\nsituation worse.\n\next4_mb_regular_allocator\n ext4_lock_group(sb, group)\n ext4_mb_good_group\n // check if the group bbitmap is corrupted\n ext4_mb_complex_scan_group\n // Scan group gets ac_b_ex but doesn\u0027t use it\n ext4_unlock_group(sb, group)\n ext4_mark_group_bitmap_corrupted(group)\n // The block bitmap was corrupted during\n // the group unlock gap.\n ext4_mb_try_best_found\n ext4_lock_group(ac-\u003eac_sb, group)\n ext4_mb_use_best_found\n mb_mark_used\n // Allocating blocks in block bitmap corrupted group", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26773", "url": "https://www.suse.com/security/cve/CVE-2024-26773" }, { "category": "external", "summary": "SUSE Bug 1222618 for CVE-2024-26773", "url": "https://bugzilla.suse.com/1222618" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26773" }, { "cve": "CVE-2024-26783", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26783" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index\n\nWith numa balancing on, when a numa system is running where a numa node\ndoesn\u0027t have its local memory so it has no managed zones, the following\noops has been observed. It\u0027s because wakeup_kswapd() is called with a\nwrong zone index, -1. Fixed it by checking the index before calling\nwakeup_kswapd().\n\n\u003e BUG: unable to handle page fault for address: 00000000000033f3\n\u003e #PF: supervisor read access in kernel mode\n\u003e #PF: error_code(0x0000) - not-present page\n\u003e PGD 0 P4D 0\n\u003e Oops: 0000 [#1] PREEMPT SMP NOPTI\n\u003e CPU: 2 PID: 895 Comm: masim Not tainted 6.6.0-dirty #255\n\u003e Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n\u003e rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\n\u003e RIP: 0010:wakeup_kswapd (./linux/mm/vmscan.c:7812)\n\u003e Code: (omitted)\n\u003e RSP: 0000:ffffc90004257d58 EFLAGS: 00010286\n\u003e RAX: ffffffffffffffff RBX: ffff88883fff0480 RCX: 0000000000000003\n\u003e RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88883fff0480\n\u003e RBP: ffffffffffffffff R08: ff0003ffffffffff R09: ffffffffffffffff\n\u003e R10: ffff888106c95540 R11: 0000000055555554 R12: 0000000000000003\n\u003e R13: 0000000000000000 R14: 0000000000000000 R15: ffff88883fff0940\n\u003e FS: 00007fc4b8124740(0000) GS:ffff888827c00000(0000) knlGS:0000000000000000\n\u003e CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n\u003e CR2: 00000000000033f3 CR3: 000000026cc08004 CR4: 0000000000770ee0\n\u003e DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n\u003e DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n\u003e PKRU: 55555554\n\u003e Call Trace:\n\u003e \u003cTASK\u003e\n\u003e ? __die\n\u003e ? page_fault_oops\n\u003e ? __pte_offset_map_lock\n\u003e ? exc_page_fault\n\u003e ? asm_exc_page_fault\n\u003e ? wakeup_kswapd\n\u003e migrate_misplaced_page\n\u003e __handle_mm_fault\n\u003e handle_mm_fault\n\u003e do_user_addr_fault\n\u003e exc_page_fault\n\u003e asm_exc_page_fault\n\u003e RIP: 0033:0x55b897ba0808\n\u003e Code: (omitted)\n\u003e RSP: 002b:00007ffeefa821a0 EFLAGS: 00010287\n\u003e RAX: 000055b89983acd0 RBX: 00007ffeefa823f8 RCX: 000055b89983acd0\n\u003e RDX: 00007fc2f8122010 RSI: 0000000000020000 RDI: 000055b89983acd0\n\u003e RBP: 00007ffeefa821a0 R08: 0000000000000037 R09: 0000000000000075\n\u003e R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000\n\u003e R13: 00007ffeefa82410 R14: 000055b897ba5dd8 R15: 00007fc4b8340000\n\u003e \u003c/TASK\u003e", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26783", "url": "https://www.suse.com/security/cve/CVE-2024-26783" }, { "category": "external", "summary": "SUSE Bug 1222615 for CVE-2024-26783", "url": "https://bugzilla.suse.com/1222615" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26783" }, { "cve": "CVE-2024-26791", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26791" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: dev-replace: properly validate device names\n\nThere\u0027s a syzbot report that device name buffers passed to device\nreplace are not properly checked for string termination which could lead\nto a read out of bounds in getname_kernel().\n\nAdd a helper that validates both source and target device name buffers.\nFor devid as the source initialize the buffer to empty string in case\nsomething tries to read it later.\n\nThis was originally analyzed and fixed in a different way by Edward Adam\nDavis (see links).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26791", "url": "https://www.suse.com/security/cve/CVE-2024-26791" }, { "category": "external", "summary": "SUSE Bug 1222793 for CVE-2024-26791", "url": "https://bugzilla.suse.com/1222793" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26791" }, { "cve": "CVE-2024-26792", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26792" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix double free of anonymous device after snapshot creation failure\n\nWhen creating a snapshot we may do a double free of an anonymous device\nin case there\u0027s an error committing the transaction. The second free may\nresult in freeing an anonymous device number that was allocated by some\nother subsystem in the kernel or another btrfs filesystem.\n\nThe steps that lead to this:\n\n1) At ioctl.c:create_snapshot() we allocate an anonymous device number\n and assign it to pending_snapshot-\u003eanon_dev;\n\n2) Then we call btrfs_commit_transaction() and end up at\n transaction.c:create_pending_snapshot();\n\n3) There we call btrfs_get_new_fs_root() and pass it the anonymous device\n number stored in pending_snapshot-\u003eanon_dev;\n\n4) btrfs_get_new_fs_root() frees that anonymous device number because\n btrfs_lookup_fs_root() returned a root - someone else did a lookup\n of the new root already, which could some task doing backref walking;\n\n5) After that some error happens in the transaction commit path, and at\n ioctl.c:create_snapshot() we jump to the \u0027fail\u0027 label, and after\n that we free again the same anonymous device number, which in the\n meanwhile may have been reallocated somewhere else, because\n pending_snapshot-\u003eanon_dev still has the same value as in step 1.\n\nRecently syzbot ran into this and reported the following trace:\n\n ------------[ cut here ]------------\n ida_free called for id=51 which is not allocated.\n WARNING: CPU: 1 PID: 31038 at lib/idr.c:525 ida_free+0x370/0x420 lib/idr.c:525\n Modules linked in:\n CPU: 1 PID: 31038 Comm: syz-executor.2 Not tainted 6.8.0-rc4-syzkaller-00410-gc02197fc9076 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\n RIP: 0010:ida_free+0x370/0x420 lib/idr.c:525\n Code: 10 42 80 3c 28 (...)\n RSP: 0018:ffffc90015a67300 EFLAGS: 00010246\n RAX: be5130472f5dd000 RBX: 0000000000000033 RCX: 0000000000040000\n RDX: ffffc90009a7a000 RSI: 000000000003ffff RDI: 0000000000040000\n RBP: ffffc90015a673f0 R08: ffffffff81577992 R09: 1ffff92002b4cdb4\n R10: dffffc0000000000 R11: fffff52002b4cdb5 R12: 0000000000000246\n R13: dffffc0000000000 R14: ffffffff8e256b80 R15: 0000000000000246\n FS: 00007fca3f4b46c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f167a17b978 CR3: 000000001ed26000 CR4: 0000000000350ef0\n Call Trace:\n \u003cTASK\u003e\n btrfs_get_root_ref+0xa48/0xaf0 fs/btrfs/disk-io.c:1346\n create_pending_snapshot+0xff2/0x2bc0 fs/btrfs/transaction.c:1837\n create_pending_snapshots+0x195/0x1d0 fs/btrfs/transaction.c:1931\n btrfs_commit_transaction+0xf1c/0x3740 fs/btrfs/transaction.c:2404\n create_snapshot+0x507/0x880 fs/btrfs/ioctl.c:848\n btrfs_mksubvol+0x5d0/0x750 fs/btrfs/ioctl.c:998\n btrfs_mksnapshot+0xb5/0xf0 fs/btrfs/ioctl.c:1044\n __btrfs_ioctl_snap_create+0x387/0x4b0 fs/btrfs/ioctl.c:1306\n btrfs_ioctl_snap_create_v2+0x1ca/0x400 fs/btrfs/ioctl.c:1393\n btrfs_ioctl+0xa74/0xd40\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:871 [inline]\n __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:857\n do_syscall_64+0xfb/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\n RIP: 0033:0x7fca3e67dda9\n Code: 28 00 00 00 (...)\n RSP: 002b:00007fca3f4b40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n RAX: ffffffffffffffda RBX: 00007fca3e7abf80 RCX: 00007fca3e67dda9\n RDX: 00000000200005c0 RSI: 0000000050009417 RDI: 0000000000000003\n RBP: 00007fca3e6ca47a R08: 0000000000000000 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\n R13: 000000000000000b R14: 00007fca3e7abf80 R15: 00007fff6bf95658\n \u003c/TASK\u003e\n\nWhere we get an explicit message where we attempt to free an anonymous\ndevice number that is not currently allocated. It happens in a different\ncode path from the example below, at btrfs_get_root_ref(), so this change\nmay not fix the case triggered by sy\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26792", "url": "https://www.suse.com/security/cve/CVE-2024-26792" }, { "category": "external", "summary": "SUSE Bug 1222430 for CVE-2024-26792", "url": "https://bugzilla.suse.com/1222430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26792" }, { "cve": "CVE-2024-26816", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26816" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86, relocs: Ignore relocations in .notes section\n\nWhen building with CONFIG_XEN_PV=y, .text symbols are emitted into\nthe .notes section so that Xen can find the \"startup_xen\" entry point.\nThis information is used prior to booting the kernel, so relocations\nare not useful. In fact, performing relocations against the .notes\nsection means that the KASLR base is exposed since /sys/kernel/notes\nis world-readable.\n\nTo avoid leaking the KASLR base without breaking unprivileged tools that\nare expecting to read /sys/kernel/notes, skip performing relocations in\nthe .notes section. The values readable in .notes are then identical to\nthose found in System.map.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26816", "url": "https://www.suse.com/security/cve/CVE-2024-26816" }, { "category": "external", "summary": "SUSE Bug 1222624 for CVE-2024-26816", "url": "https://bugzilla.suse.com/1222624" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26816" }, { "cve": "CVE-2024-26817", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26817" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\namdkfd: use calloc instead of kzalloc to avoid integer overflow\n\nThis uses calloc instead of doing the multiplication which might\noverflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26817", "url": "https://www.suse.com/security/cve/CVE-2024-26817" }, { "category": "external", "summary": "SUSE Bug 1222812 for CVE-2024-26817", "url": "https://bugzilla.suse.com/1222812" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26817" }, { "cve": "CVE-2024-26820", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26820" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed\n\nIf hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER\nhandler cannot perform VF register successfully as the register call\nis received before netvsc_probe is finished. This is because we\nregister register_netdevice_notifier() very early( even before\nvmbus_driver_register()).\nTo fix this, we try to register each such matching VF( if it is visible\nas a netdevice) at the end of netvsc_probe.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26820", "url": "https://www.suse.com/security/cve/CVE-2024-26820" }, { "category": "external", "summary": "SUSE Bug 1223078 for CVE-2024-26820", "url": "https://bugzilla.suse.com/1223078" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26820" }, { "cve": "CVE-2024-26825", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26825" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: free rx_data_reassembly skb on NCI device cleanup\n\nrx_data_reassembly skb is stored during NCI data exchange for processing\nfragmented packets. It is dropped only when the last fragment is processed\nor when an NTF packet with NCI_OP_RF_DEACTIVATE_NTF opcode is received.\nHowever, the NCI device may be deallocated before that which leads to skb\nleak.\n\nAs by design the rx_data_reassembly skb is bound to the NCI device and\nnothing prevents the device to be freed before the skb is processed in\nsome way and cleaned, free it on the NCI device cleanup.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26825", "url": "https://www.suse.com/security/cve/CVE-2024-26825" }, { "category": "external", "summary": "SUSE Bug 1223065 for CVE-2024-26825", "url": "https://bugzilla.suse.com/1223065" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26825" }, { "cve": "CVE-2024-26830", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26830" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Do not allow untrusted VF to remove administratively set MAC\n\nCurrently when PF administratively sets VF\u0027s MAC address and the VF\nis put down (VF tries to delete all MACs) then the MAC is removed\nfrom MAC filters and primary VF MAC is zeroed.\n\nDo not allow untrusted VF to remove primary MAC when it was set\nadministratively by PF.\n\nReproducer:\n1) Create VF\n2) Set VF interface up\n3) Administratively set the VF\u0027s MAC\n4) Put VF interface down\n\n[root@host ~]# echo 1 \u003e /sys/class/net/enp2s0f0/device/sriov_numvfs\n[root@host ~]# ip link set enp2s0f0v0 up\n[root@host ~]# ip link set enp2s0f0 vf 0 mac fe:6c:b5:da:c7:7d\n[root@host ~]# ip link show enp2s0f0\n23: enp2s0f0: \u003cBROADCAST,MULTICAST,UP,LOWER_UP\u003e mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\n link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff\n vf 0 link/ether fe:6c:b5:da:c7:7d brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off\n[root@host ~]# ip link set enp2s0f0v0 down\n[root@host ~]# ip link show enp2s0f0\n23: enp2s0f0: \u003cBROADCAST,MULTICAST,UP,LOWER_UP\u003e mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\n link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff\n vf 0 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26830", "url": "https://www.suse.com/security/cve/CVE-2024-26830" }, { "category": "external", "summary": "SUSE Bug 1223012 for CVE-2024-26830", "url": "https://bugzilla.suse.com/1223012" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26830" }, { "cve": "CVE-2024-26833", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26833" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix memory leak in dm_sw_fini()\n\nAfter destroying dmub_srv, the memory associated with it is\nnot freed, causing a memory leak:\n\nunreferenced object 0xffff896302b45800 (size 1024):\n comm \"(udev-worker)\", pid 222, jiffies 4294894636\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace (crc 6265fd77):\n [\u003cffffffff993495ed\u003e] kmalloc_trace+0x29d/0x340\n [\u003cffffffffc0ea4a94\u003e] dm_dmub_sw_init+0xb4/0x450 [amdgpu]\n [\u003cffffffffc0ea4e55\u003e] dm_sw_init+0x15/0x2b0 [amdgpu]\n [\u003cffffffffc0ba8557\u003e] amdgpu_device_init+0x1417/0x24e0 [amdgpu]\n [\u003cffffffffc0bab285\u003e] amdgpu_driver_load_kms+0x15/0x190 [amdgpu]\n [\u003cffffffffc0ba09c7\u003e] amdgpu_pci_probe+0x187/0x4e0 [amdgpu]\n [\u003cffffffff9968fd1e\u003e] local_pci_probe+0x3e/0x90\n [\u003cffffffff996918a3\u003e] pci_device_probe+0xc3/0x230\n [\u003cffffffff99805872\u003e] really_probe+0xe2/0x480\n [\u003cffffffff99805c98\u003e] __driver_probe_device+0x78/0x160\n [\u003cffffffff99805daf\u003e] driver_probe_device+0x1f/0x90\n [\u003cffffffff9980601e\u003e] __driver_attach+0xce/0x1c0\n [\u003cffffffff99803170\u003e] bus_for_each_dev+0x70/0xc0\n [\u003cffffffff99804822\u003e] bus_add_driver+0x112/0x210\n [\u003cffffffff99807245\u003e] driver_register+0x55/0x100\n [\u003cffffffff990012d1\u003e] do_one_initcall+0x41/0x300\n\nFix this by freeing dmub_srv after destroying it.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26833", "url": "https://www.suse.com/security/cve/CVE-2024-26833" }, { "category": "external", "summary": "SUSE Bug 1223036 for CVE-2024-26833", "url": "https://bugzilla.suse.com/1223036" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26833" }, { "cve": "CVE-2024-26836", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26836" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: think-lmi: Fix password opcode ordering for workstations\n\nThe Lenovo workstations require the password opcode to be run before\nthe attribute value is changed (if Admin password is enabled).\n\nTested on some Thinkpads to confirm they are OK with this order too.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26836", "url": "https://www.suse.com/security/cve/CVE-2024-26836" }, { "category": "external", "summary": "SUSE Bug 1222968 for CVE-2024-26836", "url": "https://bugzilla.suse.com/1222968" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26836" }, { "cve": "CVE-2024-26840", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26840" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: fix memory leak in cachefiles_add_cache()\n\nThe following memory leak was reported after unbinding /dev/cachefiles:\n\n==================================================================\nunreferenced object 0xffff9b674176e3c0 (size 192):\n comm \"cachefilesd2\", pid 680, jiffies 4294881224\n hex dump (first 32 bytes):\n 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace (crc ea38a44b):\n [\u003cffffffff8eb8a1a5\u003e] kmem_cache_alloc+0x2d5/0x370\n [\u003cffffffff8e917f86\u003e] prepare_creds+0x26/0x2e0\n [\u003cffffffffc002eeef\u003e] cachefiles_determine_cache_security+0x1f/0x120\n [\u003cffffffffc00243ec\u003e] cachefiles_add_cache+0x13c/0x3a0\n [\u003cffffffffc0025216\u003e] cachefiles_daemon_write+0x146/0x1c0\n [\u003cffffffff8ebc4a3b\u003e] vfs_write+0xcb/0x520\n [\u003cffffffff8ebc5069\u003e] ksys_write+0x69/0xf0\n [\u003cffffffff8f6d4662\u003e] do_syscall_64+0x72/0x140\n [\u003cffffffff8f8000aa\u003e] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n==================================================================\n\nPut the reference count of cache_cred in cachefiles_daemon_unbind() to\nfix the problem. And also put cache_cred in cachefiles_add_cache() error\nbranch to avoid memory leaks.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26840", "url": "https://www.suse.com/security/cve/CVE-2024-26840" }, { "category": "external", "summary": "SUSE Bug 1222976 for CVE-2024-26840", "url": "https://bugzilla.suse.com/1222976" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "low" } ], "title": "CVE-2024-26840" }, { "cve": "CVE-2024-26843", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26843" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: runtime: Fix potential overflow of soft-reserved region size\n\nmd_size will have been narrowed if we have \u003e= 4GB worth of pages in a\nsoft-reserved region.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26843", "url": "https://www.suse.com/security/cve/CVE-2024-26843" }, { "category": "external", "summary": "SUSE Bug 1223014 for CVE-2024-26843", "url": "https://bugzilla.suse.com/1223014" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26843" }, { "cve": "CVE-2024-26852", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26852" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: avoid possible UAF in ip6_route_mpath_notify()\n\nsyzbot found another use-after-free in ip6_route_mpath_notify() [1]\n\nCommit f7225172f25a (\"net/ipv6: prevent use after free in\nip6_route_mpath_notify\") was not able to fix the root cause.\n\nWe need to defer the fib6_info_release() calls after\nip6_route_mpath_notify(), in the cleanup phase.\n\n[1]\nBUG: KASAN: slab-use-after-free in rt6_fill_node+0x1460/0x1ac0\nRead of size 4 at addr ffff88809a07fc64 by task syz-executor.2/23037\n\nCPU: 0 PID: 23037 Comm: syz-executor.2 Not tainted 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x1e7/0x2e0 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x167/0x540 mm/kasan/report.c:488\n kasan_report+0x142/0x180 mm/kasan/report.c:601\n rt6_fill_node+0x1460/0x1ac0\n inet6_rt_notify+0x13b/0x290 net/ipv6/route.c:6184\n ip6_route_mpath_notify net/ipv6/route.c:5198 [inline]\n ip6_route_multipath_add net/ipv6/route.c:5404 [inline]\n inet6_rtm_newroute+0x1d0f/0x2300 net/ipv6/route.c:5517\n rtnetlink_rcv_msg+0x885/0x1040 net/core/rtnetlink.c:6597\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2543\n netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1367\n netlink_sendmsg+0xa3b/0xd70 net/netlink/af_netlink.c:1908\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n ____sys_sendmsg+0x525/0x7d0 net/socket.c:2584\n ___sys_sendmsg net/socket.c:2638 [inline]\n __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2667\n do_syscall_64+0xf9/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\nRIP: 0033:0x7f73dd87dda9\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f73de6550c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f73dd9ac050 RCX: 00007f73dd87dda9\nRDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005\nRBP: 00007f73dd8ca47a R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000006e R14: 00007f73dd9ac050 R15: 00007ffdbdeb7858\n \u003c/TASK\u003e\n\nAllocated by task 23037:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:372 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:389\n kasan_kmalloc include/linux/kasan.h:211 [inline]\n __do_kmalloc_node mm/slub.c:3981 [inline]\n __kmalloc+0x22e/0x490 mm/slub.c:3994\n kmalloc include/linux/slab.h:594 [inline]\n kzalloc include/linux/slab.h:711 [inline]\n fib6_info_alloc+0x2e/0xf0 net/ipv6/ip6_fib.c:155\n ip6_route_info_create+0x445/0x12b0 net/ipv6/route.c:3758\n ip6_route_multipath_add net/ipv6/route.c:5298 [inline]\n inet6_rtm_newroute+0x744/0x2300 net/ipv6/route.c:5517\n rtnetlink_rcv_msg+0x885/0x1040 net/core/rtnetlink.c:6597\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2543\n netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1367\n netlink_sendmsg+0xa3b/0xd70 net/netlink/af_netlink.c:1908\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n ____sys_sendmsg+0x525/0x7d0 net/socket.c:2584\n ___sys_sendmsg net/socket.c:2638 [inline]\n __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2667\n do_syscall_64+0xf9/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\n\nFreed by task 16:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x4e/0x60 mm/kasan/generic.c:640\n poison_slab_object+0xa6/0xe0 m\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26852", "url": "https://www.suse.com/security/cve/CVE-2024-26852" }, { "category": "external", "summary": "SUSE Bug 1223057 for CVE-2024-26852", "url": "https://bugzilla.suse.com/1223057" }, { "category": "external", "summary": "SUSE Bug 1223059 for CVE-2024-26852", "url": "https://bugzilla.suse.com/1223059" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-26852" }, { "cve": "CVE-2024-26853", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26853" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: avoid returning frame twice in XDP_REDIRECT\n\nWhen a frame can not be transmitted in XDP_REDIRECT\n(e.g. due to a full queue), it is necessary to free\nit by calling xdp_return_frame_rx_napi.\n\nHowever, this is the responsibility of the caller of\nthe ndo_xdp_xmit (see for example bq_xmit_all in\nkernel/bpf/devmap.c) and thus calling it inside\nigc_xdp_xmit (which is the ndo_xdp_xmit of the igc\ndriver) as well will lead to memory corruption.\n\nIn fact, bq_xmit_all expects that it can return all\nframes after the last successfully transmitted one.\nTherefore, break for the first not transmitted frame,\nbut do not call xdp_return_frame_rx_napi in igc_xdp_xmit.\nThis is equally implemented in other Intel drivers\nsuch as the igb.\n\nThere are two alternatives to this that were rejected:\n1. Return num_frames as all the frames would have been\n transmitted and release them inside igc_xdp_xmit.\n While it might work technically, it is not what\n the return value is meant to represent (i.e. the\n number of SUCCESSFULLY transmitted packets).\n2. Rework kernel/bpf/devmap.c and all drivers to\n support non-consecutively dropped packets.\n Besides being complex, it likely has a negative\n performance impact without a significant gain\n since it is anyway unlikely that the next frame\n can be transmitted if the previous one was dropped.\n\nThe memory corruption can be reproduced with\nthe following script which leads to a kernel panic\nafter a few seconds. It basically generates more\ntraffic than a i225 NIC can transmit and pushes it\nvia XDP_REDIRECT from a virtual interface to the\nphysical interface where frames get dropped.\n\n #!/bin/bash\n INTERFACE=enp4s0\n INTERFACE_IDX=`cat /sys/class/net/$INTERFACE/ifindex`\n\n sudo ip link add dev veth1 type veth peer name veth2\n sudo ip link set up $INTERFACE\n sudo ip link set up veth1\n sudo ip link set up veth2\n\n cat \u003c\u003c EOF \u003e redirect.bpf.c\n\n SEC(\"prog\")\n int redirect(struct xdp_md *ctx)\n {\n return bpf_redirect($INTERFACE_IDX, 0);\n }\n\n char _license[] SEC(\"license\") = \"GPL\";\n EOF\n clang -O2 -g -Wall -target bpf -c redirect.bpf.c -o redirect.bpf.o\n sudo ip link set veth2 xdp obj redirect.bpf.o\n\n cat \u003c\u003c EOF \u003e pass.bpf.c\n\n SEC(\"prog\")\n int pass(struct xdp_md *ctx)\n {\n return XDP_PASS;\n }\n\n char _license[] SEC(\"license\") = \"GPL\";\n EOF\n clang -O2 -g -Wall -target bpf -c pass.bpf.c -o pass.bpf.o\n sudo ip link set $INTERFACE xdp obj pass.bpf.o\n\n cat \u003c\u003c EOF \u003e trafgen.cfg\n\n {\n /* Ethernet Header */\n 0xe8, 0x6a, 0x64, 0x41, 0xbf, 0x46,\n 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,\n const16(ETH_P_IP),\n\n /* IPv4 Header */\n 0b01000101, 0, # IPv4 version, IHL, TOS\n const16(1028), # IPv4 total length (UDP length + 20 bytes (IP header))\n const16(2), # IPv4 ident\n 0b01000000, 0, # IPv4 flags, fragmentation off\n 64, # IPv4 TTL\n 17, # Protocol UDP\n csumip(14, 33), # IPv4 checksum\n\n /* UDP Header */\n 10, 0, 1, 1, # IP Src - adapt as needed\n 10, 0, 1, 2, # IP Dest - adapt as needed\n const16(6666), # UDP Src Port\n const16(6666), # UDP Dest Port\n const16(1008), # UDP length (UDP header 8 bytes + payload length)\n csumudp(14, 34), # UDP checksum\n\n /* Payload */\n fill(\u0027W\u0027, 1000),\n }\n EOF\n\n sudo trafgen -i trafgen.cfg -b3000MB -o veth1 --cpp", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26853", "url": "https://www.suse.com/security/cve/CVE-2024-26853" }, { "category": "external", "summary": "SUSE Bug 1223061 for CVE-2024-26853", "url": "https://bugzilla.suse.com/1223061" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26853" }, { "cve": "CVE-2024-26855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26855" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()\n\nThe function ice_bridge_setlink() may encounter a NULL pointer dereference\nif nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently\nin nla_for_each_nested(). To address this issue, add a check to ensure that\nbr_spec is not NULL before proceeding with the nested attribute iteration.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26855", "url": "https://www.suse.com/security/cve/CVE-2024-26855" }, { "category": "external", "summary": "SUSE Bug 1223051 for CVE-2024-26855", "url": "https://bugzilla.suse.com/1223051" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26855" }, { "cve": "CVE-2024-26856", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26856" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: Fix use after free inside sparx5_del_mact_entry\n\nBased on the static analyzis of the code it looks like when an entry\nfrom the MAC table was removed, the entry was still used after being\nfreed. More precise the vid of the mac_entry was used after calling\ndevm_kfree on the mac_entry.\nThe fix consists in first using the vid of the mac_entry to delete the\nentry from the HW and after that to free it.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26856", "url": "https://www.suse.com/security/cve/CVE-2024-26856" }, { "category": "external", "summary": "SUSE Bug 1223052 for CVE-2024-26856", "url": "https://bugzilla.suse.com/1223052" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26856" }, { "cve": "CVE-2024-26857", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26857" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: make sure to pull inner header in geneve_rx()\n\nsyzbot triggered a bug in geneve_rx() [1]\n\nIssue is similar to the one I fixed in commit 8d975c15c0cd\n(\"ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()\")\n\nWe have to save skb-\u003enetwork_header in a temporary variable\nin order to be able to recompute the network_header pointer\nafter a pskb_inet_may_pull() call.\n\npskb_inet_may_pull() makes sure the needed headers are in skb-\u003ehead.\n\n[1]\nBUG: KMSAN: uninit-value in IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n BUG: KMSAN: uninit-value in geneve_rx drivers/net/geneve.c:279 [inline]\n BUG: KMSAN: uninit-value in geneve_udp_encap_recv+0x36f9/0x3c10 drivers/net/geneve.c:391\n IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n geneve_rx drivers/net/geneve.c:279 [inline]\n geneve_udp_encap_recv+0x36f9/0x3c10 drivers/net/geneve.c:391\n udp_queue_rcv_one_skb+0x1d39/0x1f20 net/ipv4/udp.c:2108\n udp_queue_rcv_skb+0x6ae/0x6e0 net/ipv4/udp.c:2186\n udp_unicast_rcv_skb+0x184/0x4b0 net/ipv4/udp.c:2346\n __udp4_lib_rcv+0x1c6b/0x3010 net/ipv4/udp.c:2422\n udp_rcv+0x7d/0xa0 net/ipv4/udp.c:2604\n ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233\n NF_HOOK include/linux/netfilter.h:314 [inline]\n ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254\n dst_input include/net/dst.h:461 [inline]\n ip_rcv_finish net/ipv4/ip_input.c:449 [inline]\n NF_HOOK include/linux/netfilter.h:314 [inline]\n ip_rcv+0x46f/0x760 net/ipv4/ip_input.c:569\n __netif_receive_skb_one_core net/core/dev.c:5534 [inline]\n __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5648\n process_backlog+0x480/0x8b0 net/core/dev.c:5976\n __napi_poll+0xe3/0x980 net/core/dev.c:6576\n napi_poll net/core/dev.c:6645 [inline]\n net_rx_action+0x8b8/0x1870 net/core/dev.c:6778\n __do_softirq+0x1b7/0x7c5 kernel/softirq.c:553\n do_softirq+0x9a/0xf0 kernel/softirq.c:454\n __local_bh_enable_ip+0x9b/0xa0 kernel/softirq.c:381\n local_bh_enable include/linux/bottom_half.h:33 [inline]\n rcu_read_unlock_bh include/linux/rcupdate.h:820 [inline]\n __dev_queue_xmit+0x2768/0x51c0 net/core/dev.c:4378\n dev_queue_xmit include/linux/netdevice.h:3171 [inline]\n packet_xmit+0x9c/0x6b0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3081 [inline]\n packet_sendmsg+0x8aef/0x9f10 net/packet/af_packet.c:3113\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n __sys_sendto+0x735/0xa10 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:3819 [inline]\n slab_alloc_node mm/slub.c:3860 [inline]\n kmem_cache_alloc_node+0x5cb/0xbc0 mm/slub.c:3903\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x352/0x790 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1296 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6394\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2783\n packet_alloc_skb net/packet/af_packet.c:2930 [inline]\n packet_snd net/packet/af_packet.c:3024 [inline]\n packet_sendmsg+0x70c2/0x9f10 net/packet/af_packet.c:3113\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n __sys_sendto+0x735/0xa10 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26857", "url": "https://www.suse.com/security/cve/CVE-2024-26857" }, { "category": "external", "summary": "SUSE Bug 1223058 for CVE-2024-26857", "url": "https://bugzilla.suse.com/1223058" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26857" }, { "cve": "CVE-2024-26861", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26861" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: receive: annotate data-race around receiving_counter.counter\n\nSyzkaller with KCSAN identified a data-race issue when accessing\nkeypair-\u003ereceiving_counter.counter. Use READ_ONCE() and WRITE_ONCE()\nannotations to mark the data race as intentional.\n\n BUG: KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll\n\n write to 0xffff888107765888 of 8 bytes by interrupt on cpu 0:\n counter_validate drivers/net/wireguard/receive.c:321 [inline]\n wg_packet_rx_poll+0x3ac/0xf00 drivers/net/wireguard/receive.c:461\n __napi_poll+0x60/0x3b0 net/core/dev.c:6536\n napi_poll net/core/dev.c:6605 [inline]\n net_rx_action+0x32b/0x750 net/core/dev.c:6738\n __do_softirq+0xc4/0x279 kernel/softirq.c:553\n do_softirq+0x5e/0x90 kernel/softirq.c:454\n __local_bh_enable_ip+0x64/0x70 kernel/softirq.c:381\n __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]\n _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210\n spin_unlock_bh include/linux/spinlock.h:396 [inline]\n ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]\n wg_packet_decrypt_worker+0x6c5/0x700 drivers/net/wireguard/receive.c:499\n process_one_work kernel/workqueue.c:2633 [inline]\n ...\n\n read to 0xffff888107765888 of 8 bytes by task 3196 on cpu 1:\n decrypt_packet drivers/net/wireguard/receive.c:252 [inline]\n wg_packet_decrypt_worker+0x220/0x700 drivers/net/wireguard/receive.c:501\n process_one_work kernel/workqueue.c:2633 [inline]\n process_scheduled_works+0x5b8/0xa30 kernel/workqueue.c:2706\n worker_thread+0x525/0x730 kernel/workqueue.c:2787\n ...", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26861", "url": "https://www.suse.com/security/cve/CVE-2024-26861" }, { "category": "external", "summary": "SUSE Bug 1223076 for CVE-2024-26861", "url": "https://bugzilla.suse.com/1223076" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26861" }, { "cve": "CVE-2024-26862", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26862" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npacket: annotate data-races around ignore_outgoing\n\nignore_outgoing is read locklessly from dev_queue_xmit_nit()\nand packet_getsockopt()\n\nAdd appropriate READ_ONCE()/WRITE_ONCE() annotations.\n\nsyzbot reported:\n\nBUG: KCSAN: data-race in dev_queue_xmit_nit / packet_setsockopt\n\nwrite to 0xffff888107804542 of 1 bytes by task 22618 on cpu 0:\n packet_setsockopt+0xd83/0xfd0 net/packet/af_packet.c:4003\n do_sock_setsockopt net/socket.c:2311 [inline]\n __sys_setsockopt+0x1d8/0x250 net/socket.c:2334\n __do_sys_setsockopt net/socket.c:2343 [inline]\n __se_sys_setsockopt net/socket.c:2340 [inline]\n __x64_sys_setsockopt+0x66/0x80 net/socket.c:2340\n do_syscall_64+0xd3/0x1d0\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nread to 0xffff888107804542 of 1 bytes by task 27 on cpu 1:\n dev_queue_xmit_nit+0x82/0x620 net/core/dev.c:2248\n xmit_one net/core/dev.c:3527 [inline]\n dev_hard_start_xmit+0xcc/0x3f0 net/core/dev.c:3547\n __dev_queue_xmit+0xf24/0x1dd0 net/core/dev.c:4335\n dev_queue_xmit include/linux/netdevice.h:3091 [inline]\n batadv_send_skb_packet+0x264/0x300 net/batman-adv/send.c:108\n batadv_send_broadcast_skb+0x24/0x30 net/batman-adv/send.c:127\n batadv_iv_ogm_send_to_if net/batman-adv/bat_iv_ogm.c:392 [inline]\n batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:420 [inline]\n batadv_iv_send_outstanding_bat_ogm_packet+0x3f0/0x4b0 net/batman-adv/bat_iv_ogm.c:1700\n process_one_work kernel/workqueue.c:3254 [inline]\n process_scheduled_works+0x465/0x990 kernel/workqueue.c:3335\n worker_thread+0x526/0x730 kernel/workqueue.c:3416\n kthread+0x1d1/0x210 kernel/kthread.c:388\n ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243\n\nvalue changed: 0x00 -\u003e 0x01\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 1 PID: 27 Comm: kworker/u8:1 Tainted: G W 6.8.0-syzkaller-08073-g480e035fc4c7 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024\nWorkqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26862", "url": "https://www.suse.com/security/cve/CVE-2024-26862" }, { "category": "external", "summary": "SUSE Bug 1223111 for CVE-2024-26862", "url": "https://bugzilla.suse.com/1223111" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26862" }, { "cve": "CVE-2024-26866", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26866" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: lpspi: Avoid potential use-after-free in probe()\n\nfsl_lpspi_probe() is allocating/disposing memory manually with\nspi_alloc_host()/spi_alloc_target(), but uses\ndevm_spi_register_controller(). In case of error after the latter call the\nmemory will be explicitly freed in the probe function by\nspi_controller_put() call, but used afterwards by \"devm\" management outside\nprobe() (spi_unregister_controller() \u003c- devm_spi_unregister() below).\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000070\n...\nCall trace:\n kernfs_find_ns\n kernfs_find_and_get_ns\n sysfs_remove_group\n sysfs_remove_groups\n device_remove_attrs\n device_del\n spi_unregister_controller\n devm_spi_unregister\n release_nodes\n devres_release_all\n really_probe\n driver_probe_device\n __device_attach_driver\n bus_for_each_drv\n __device_attach\n device_initial_probe\n bus_probe_device\n deferred_probe_work_func\n process_one_work\n worker_thread\n kthread\n ret_from_fork", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26866", "url": "https://www.suse.com/security/cve/CVE-2024-26866" }, { "category": "external", "summary": "SUSE Bug 1223024 for CVE-2024-26866", "url": "https://bugzilla.suse.com/1223024" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26866" }, { "cve": "CVE-2024-26872", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26872" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: Do not register event handler until srpt device is fully setup\n\nUpon rare occasions, KASAN reports a use-after-free Write\nin srpt_refresh_port().\n\nThis seems to be because an event handler is registered before the\nsrpt device is fully setup and a race condition upon error may leave a\npartially setup event handler in place.\n\nInstead, only register the event handler after srpt device initialization\nis complete.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26872", "url": "https://www.suse.com/security/cve/CVE-2024-26872" }, { "category": "external", "summary": "SUSE Bug 1223115 for CVE-2024-26872", "url": "https://bugzilla.suse.com/1223115" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26872" }, { "cve": "CVE-2024-26875", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26875" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: pvrusb2: fix uaf in pvr2_context_set_notify\n\n[Syzbot reported]\nBUG: KASAN: slab-use-after-free in pvr2_context_set_notify+0x2c4/0x310 drivers/media/usb/pvrusb2/pvrusb2-context.c:35\nRead of size 4 at addr ffff888113aeb0d8 by task kworker/1:1/26\n\nCPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 6.8.0-rc1-syzkaller-00046-gf1a27f081c1f #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc4/0x620 mm/kasan/report.c:488\n kasan_report+0xda/0x110 mm/kasan/report.c:601\n pvr2_context_set_notify+0x2c4/0x310 drivers/media/usb/pvrusb2/pvrusb2-context.c:35\n pvr2_context_notify drivers/media/usb/pvrusb2/pvrusb2-context.c:95 [inline]\n pvr2_context_disconnect+0x94/0xb0 drivers/media/usb/pvrusb2/pvrusb2-context.c:272\n\nFreed by task 906:\nkasan_save_stack+0x33/0x50 mm/kasan/common.c:47\nkasan_save_track+0x14/0x30 mm/kasan/common.c:68\nkasan_save_free_info+0x3f/0x60 mm/kasan/generic.c:640\npoison_slab_object mm/kasan/common.c:241 [inline]\n__kasan_slab_free+0x106/0x1b0 mm/kasan/common.c:257\nkasan_slab_free include/linux/kasan.h:184 [inline]\nslab_free_hook mm/slub.c:2121 [inline]\nslab_free mm/slub.c:4299 [inline]\nkfree+0x105/0x340 mm/slub.c:4409\npvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:137 [inline]\npvr2_context_thread_func+0x69d/0x960 drivers/media/usb/pvrusb2/pvrusb2-context.c:158\n\n[Analyze]\nTask A set disconnect_flag = !0, which resulted in Task B\u0027s condition being met\nand releasing mp, leading to this issue.\n\n[Fix]\nPlace the disconnect_flag assignment operation after all code in pvr2_context_disconnect()\nto avoid this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26875", "url": "https://www.suse.com/security/cve/CVE-2024-26875" }, { "category": "external", "summary": "SUSE Bug 1223118 for CVE-2024-26875", "url": "https://bugzilla.suse.com/1223118" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26875" }, { "cve": "CVE-2024-26876", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26876" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: adv7511: fix crash on irq during probe\n\nMoved IRQ registration down to end of adv7511_probe().\n\nIf an IRQ already is pending during adv7511_probe\n(before adv7511_cec_init) then cec_received_msg_ts\ncould crash using uninitialized data:\n\n Unable to handle kernel read from unreadable memory at virtual address 00000000000003d5\n Internal error: Oops: 96000004 [#1] PREEMPT_RT SMP\n Call trace:\n cec_received_msg_ts+0x48/0x990 [cec]\n adv7511_cec_irq_process+0x1cc/0x308 [adv7511]\n adv7511_irq_process+0xd8/0x120 [adv7511]\n adv7511_irq_handler+0x1c/0x30 [adv7511]\n irq_thread_fn+0x30/0xa0\n irq_thread+0x14c/0x238\n kthread+0x190/0x1a8", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26876", "url": "https://www.suse.com/security/cve/CVE-2024-26876" }, { "category": "external", "summary": "SUSE Bug 1223119 for CVE-2024-26876", "url": "https://bugzilla.suse.com/1223119" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26876" }, { "cve": "CVE-2024-26877", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26877" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: xilinx - call finalize with bh disabled\n\nWhen calling crypto_finalize_request, BH should be disabled to avoid\ntriggering the following calltrace:\n\n ------------[ cut here ]------------\n WARNING: CPU: 2 PID: 74 at crypto/crypto_engine.c:58 crypto_finalize_request+0xa0/0x118\n Modules linked in: cryptodev(O)\n CPU: 2 PID: 74 Comm: firmware:zynqmp Tainted: G O 6.8.0-rc1-yocto-standard #323\n Hardware name: ZynqMP ZCU102 Rev1.0 (DT)\n pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : crypto_finalize_request+0xa0/0x118\n lr : crypto_finalize_request+0x104/0x118\n sp : ffffffc085353ce0\n x29: ffffffc085353ce0 x28: 0000000000000000 x27: ffffff8808ea8688\n x26: ffffffc081715038 x25: 0000000000000000 x24: ffffff880100db00\n x23: ffffff880100da80 x22: 0000000000000000 x21: 0000000000000000\n x20: ffffff8805b14000 x19: ffffff880100da80 x18: 0000000000010450\n x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n x14: 0000000000000003 x13: 0000000000000000 x12: ffffff880100dad0\n x11: 0000000000000000 x10: ffffffc0832dcd08 x9 : ffffffc0812416d8\n x8 : 00000000000001f4 x7 : ffffffc0830d2830 x6 : 0000000000000001\n x5 : ffffffc082091000 x4 : ffffffc082091658 x3 : 0000000000000000\n x2 : ffffffc7f9653000 x1 : 0000000000000000 x0 : ffffff8802d20000\n Call trace:\n crypto_finalize_request+0xa0/0x118\n crypto_finalize_aead_request+0x18/0x30\n zynqmp_handle_aes_req+0xcc/0x388\n crypto_pump_work+0x168/0x2d8\n kthread_worker_fn+0xfc/0x3a0\n kthread+0x118/0x138\n ret_from_fork+0x10/0x20\n irq event stamp: 40\n hardirqs last enabled at (39): [\u003cffffffc0812416f8\u003e] _raw_spin_unlock_irqrestore+0x70/0xb0\n hardirqs last disabled at (40): [\u003cffffffc08122d208\u003e] el1_dbg+0x28/0x90\n softirqs last enabled at (36): [\u003cffffffc080017dec\u003e] kernel_neon_begin+0x8c/0xf0\n softirqs last disabled at (34): [\u003cffffffc080017dc0\u003e] kernel_neon_begin+0x60/0xf0\n ---[ end trace 0000000000000000 ]---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26877", "url": "https://www.suse.com/security/cve/CVE-2024-26877" }, { "category": "external", "summary": "SUSE Bug 1223140 for CVE-2024-26877", "url": "https://bugzilla.suse.com/1223140" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26877" }, { "cve": "CVE-2024-26878", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26878" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: Fix potential NULL pointer dereference\n\nBelow race may cause NULL pointer dereference\n\nP1\t\t\t\t\tP2\ndquot_free_inode\t\t\tquota_off\n\t\t\t\t\t drop_dquot_ref\n\t\t\t\t\t remove_dquot_ref\n\t\t\t\t\t dquots = i_dquot(inode)\n dquots = i_dquot(inode)\n srcu_read_lock\n dquots[cnt]) != NULL (1)\n\t\t\t\t\t dquots[type] = NULL (2)\n spin_lock(\u0026dquots[cnt]-\u003edq_dqb_lock) (3)\n ....\n\nIf dquot_free_inode(or other routines) checks inode\u0027s quota pointers (1)\nbefore quota_off sets it to NULL(2) and use it (3) after that, NULL pointer\ndereference will be triggered.\n\nSo let\u0027s fix it by using a temporary pointer to avoid this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26878", "url": "https://www.suse.com/security/cve/CVE-2024-26878" }, { "category": "external", "summary": "SUSE Bug 1223060 for CVE-2024-26878", "url": "https://bugzilla.suse.com/1223060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26878" }, { "cve": "CVE-2024-26879", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26879" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: meson: Add missing clocks to axg_clk_regmaps\n\nSome clocks were missing from axg_clk_regmaps, which caused kernel panic\nduring cat /sys/kernel/debug/clk/clk_summary\n\n[ 57.349402] Unable to handle kernel NULL pointer dereference at virtual address 00000000000001fc\n...\n[ 57.430002] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 57.436900] pc : regmap_read+0x1c/0x88\n[ 57.440608] lr : clk_regmap_gate_is_enabled+0x3c/0xb0\n[ 57.445611] sp : ffff800082f1b690\n[ 57.448888] x29: ffff800082f1b690 x28: 0000000000000000 x27: ffff800080eb9a70\n[ 57.455961] x26: 0000000000000007 x25: 0000000000000016 x24: 0000000000000000\n[ 57.463033] x23: ffff800080e8b488 x22: 0000000000000015 x21: ffff00000e7e7000\n[ 57.470106] x20: ffff00000400ec00 x19: 0000000000000000 x18: ffffffffffffffff\n[ 57.477178] x17: 0000000000000000 x16: 0000000000000000 x15: ffff0000042a3000\n[ 57.484251] x14: 0000000000000000 x13: ffff0000042a2fec x12: 0000000005f5e100\n[ 57.491323] x11: abcc77118461cefd x10: 0000000000000020 x9 : ffff8000805e4b24\n[ 57.498396] x8 : ffff0000028063c0 x7 : ffff800082f1b710 x6 : ffff800082f1b710\n[ 57.505468] x5 : 00000000ffffffd0 x4 : ffff800082f1b6e0 x3 : 0000000000001000\n[ 57.512541] x2 : ffff800082f1b6e4 x1 : 000000000000012c x0 : 0000000000000000\n[ 57.519615] Call trace:\n[ 57.522030] regmap_read+0x1c/0x88\n[ 57.525393] clk_regmap_gate_is_enabled+0x3c/0xb0\n[ 57.530050] clk_core_is_enabled+0x44/0x120\n[ 57.534190] clk_summary_show_subtree+0x154/0x2f0\n[ 57.538847] clk_summary_show_subtree+0x220/0x2f0\n[ 57.543505] clk_summary_show_subtree+0x220/0x2f0\n[ 57.548162] clk_summary_show_subtree+0x220/0x2f0\n[ 57.552820] clk_summary_show_subtree+0x220/0x2f0\n[ 57.557477] clk_summary_show_subtree+0x220/0x2f0\n[ 57.562135] clk_summary_show_subtree+0x220/0x2f0\n[ 57.566792] clk_summary_show_subtree+0x220/0x2f0\n[ 57.571450] clk_summary_show+0x84/0xb8\n[ 57.575245] seq_read_iter+0x1bc/0x4b8\n[ 57.578954] seq_read+0x8c/0xd0\n[ 57.582059] full_proxy_read+0x68/0xc8\n[ 57.585767] vfs_read+0xb0/0x268\n[ 57.588959] ksys_read+0x70/0x108\n[ 57.592236] __arm64_sys_read+0x24/0x38\n[ 57.596031] invoke_syscall+0x50/0x128\n[ 57.599740] el0_svc_common.constprop.0+0x48/0xf8\n[ 57.604397] do_el0_svc+0x28/0x40\n[ 57.607675] el0_svc+0x34/0xb8\n[ 57.610694] el0t_64_sync_handler+0x13c/0x158\n[ 57.615006] el0t_64_sync+0x190/0x198\n[ 57.618635] Code: a9bd7bfd 910003fd a90153f3 aa0003f3 (b941fc00)\n[ 57.624668] ---[ end trace 0000000000000000 ]---\n\n[jbrunet: add missing Fixes tag]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26879", "url": "https://www.suse.com/security/cve/CVE-2024-26879" }, { "category": "external", "summary": "SUSE Bug 1223066 for CVE-2024-26879", "url": "https://bugzilla.suse.com/1223066" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26879" }, { "cve": "CVE-2024-26881", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26881" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is received on HIP08 devices\n\nThe HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL, but the hardware can receive 1588 messages,\nand set the HNS3_RXD_TS_VLD_B bit, so, if match this case, the\naccess of hdev-\u003eptp-\u003eflags will cause a kernel crash:\n\n[ 5888.946472] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n[ 5888.946475] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 5889.266118] pc : hclge_ptp_get_rx_hwts+0x40/0x170 [hclge]\n[ 5889.272612] lr : hclge_ptp_get_rx_hwts+0x34/0x170 [hclge]\n[ 5889.279101] sp : ffff800012c3bc50\n[ 5889.283516] x29: ffff800012c3bc50 x28: ffff2040002be040\n[ 5889.289927] x27: ffff800009116484 x26: 0000000080007500\n[ 5889.296333] x25: 0000000000000000 x24: ffff204001c6f000\n[ 5889.302738] x23: ffff204144f53c00 x22: 0000000000000000\n[ 5889.309134] x21: 0000000000000000 x20: ffff204004220080\n[ 5889.315520] x19: ffff204144f53c00 x18: 0000000000000000\n[ 5889.321897] x17: 0000000000000000 x16: 0000000000000000\n[ 5889.328263] x15: 0000004000140ec8 x14: 0000000000000000\n[ 5889.334617] x13: 0000000000000000 x12: 00000000010011df\n[ 5889.340965] x11: bbfeff4d22000000 x10: 0000000000000000\n[ 5889.347303] x9 : ffff800009402124 x8 : 0200f78811dfbb4d\n[ 5889.353637] x7 : 2200000000191b01 x6 : ffff208002a7d480\n[ 5889.359959] x5 : 0000000000000000 x4 : 0000000000000000\n[ 5889.366271] x3 : 0000000000000000 x2 : 0000000000000000\n[ 5889.372567] x1 : 0000000000000000 x0 : ffff20400095c080\n[ 5889.378857] Call trace:\n[ 5889.382285] hclge_ptp_get_rx_hwts+0x40/0x170 [hclge]\n[ 5889.388304] hns3_handle_bdinfo+0x324/0x410 [hns3]\n[ 5889.394055] hns3_handle_rx_bd+0x60/0x150 [hns3]\n[ 5889.399624] hns3_clean_rx_ring+0x84/0x170 [hns3]\n[ 5889.405270] hns3_nic_common_poll+0xa8/0x220 [hns3]\n[ 5889.411084] napi_poll+0xcc/0x264\n[ 5889.415329] net_rx_action+0xd4/0x21c\n[ 5889.419911] __do_softirq+0x130/0x358\n[ 5889.424484] irq_exit+0x134/0x154\n[ 5889.428700] __handle_domain_irq+0x88/0xf0\n[ 5889.433684] gic_handle_irq+0x78/0x2c0\n[ 5889.438319] el1_irq+0xb8/0x140\n[ 5889.442354] arch_cpu_idle+0x18/0x40\n[ 5889.446816] default_idle_call+0x5c/0x1c0\n[ 5889.451714] cpuidle_idle_call+0x174/0x1b0\n[ 5889.456692] do_idle+0xc8/0x160\n[ 5889.460717] cpu_startup_entry+0x30/0xfc\n[ 5889.465523] secondary_start_kernel+0x158/0x1ec\n[ 5889.470936] Code: 97ffab78 f9411c14 91408294 f9457284 (f9400c80)\n[ 5889.477950] SMP: stopping secondary CPUs\n[ 5890.514626] SMP: failed to stop secondary CPUs 0-69,71-95\n[ 5890.522951] Starting crashdump kernel...", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26881", "url": "https://www.suse.com/security/cve/CVE-2024-26881" }, { "category": "external", "summary": "SUSE Bug 1223041 for CVE-2024-26881", "url": "https://bugzilla.suse.com/1223041" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26881" }, { "cve": "CVE-2024-26882", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26882" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()\n\nApply the same fix than ones found in :\n\n8d975c15c0cd (\"ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()\")\n1ca1ba465e55 (\"geneve: make sure to pull inner header in geneve_rx()\")\n\nWe have to save skb-\u003enetwork_header in a temporary variable\nin order to be able to recompute the network_header pointer\nafter a pskb_inet_may_pull() call.\n\npskb_inet_may_pull() makes sure the needed headers are in skb-\u003ehead.\n\nsyzbot reported:\nBUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n BUG: KMSAN: uninit-value in IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n BUG: KMSAN: uninit-value in ip_tunnel_rcv+0xed9/0x2ed0 net/ipv4/ip_tunnel.c:409\n __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n ip_tunnel_rcv+0xed9/0x2ed0 net/ipv4/ip_tunnel.c:409\n __ipgre_rcv+0x9bc/0xbc0 net/ipv4/ip_gre.c:389\n ipgre_rcv net/ipv4/ip_gre.c:411 [inline]\n gre_rcv+0x423/0x19f0 net/ipv4/ip_gre.c:447\n gre_rcv+0x2a4/0x390 net/ipv4/gre_demux.c:163\n ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233\n NF_HOOK include/linux/netfilter.h:314 [inline]\n ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254\n dst_input include/net/dst.h:461 [inline]\n ip_rcv_finish net/ipv4/ip_input.c:449 [inline]\n NF_HOOK include/linux/netfilter.h:314 [inline]\n ip_rcv+0x46f/0x760 net/ipv4/ip_input.c:569\n __netif_receive_skb_one_core net/core/dev.c:5534 [inline]\n __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5648\n netif_receive_skb_internal net/core/dev.c:5734 [inline]\n netif_receive_skb+0x58/0x660 net/core/dev.c:5793\n tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1556\n tun_get_user+0x53b9/0x66e0 drivers/net/tun.c:2009\n tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2055\n call_write_iter include/linux/fs.h:2087 [inline]\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xb6b/0x1520 fs/read_write.c:590\n ksys_write+0x20f/0x4c0 fs/read_write.c:643\n __do_sys_write fs/read_write.c:655 [inline]\n __se_sys_write fs/read_write.c:652 [inline]\n __x64_sys_write+0x93/0xd0 fs/read_write.c:652\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n __alloc_pages+0x9a6/0xe00 mm/page_alloc.c:4590\n alloc_pages_mpol+0x62b/0x9d0 mm/mempolicy.c:2133\n alloc_pages+0x1be/0x1e0 mm/mempolicy.c:2204\n skb_page_frag_refill+0x2bf/0x7c0 net/core/sock.c:2909\n tun_build_skb drivers/net/tun.c:1686 [inline]\n tun_get_user+0xe0a/0x66e0 drivers/net/tun.c:1826\n tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2055\n call_write_iter include/linux/fs.h:2087 [inline]\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xb6b/0x1520 fs/read_write.c:590\n ksys_write+0x20f/0x4c0 fs/read_write.c:643\n __do_sys_write fs/read_write.c:655 [inline]\n __se_sys_write fs/read_write.c:652 [inline]\n __x64_sys_write+0x93/0xd0 fs/read_write.c:652\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26882", "url": "https://www.suse.com/security/cve/CVE-2024-26882" }, { "category": "external", "summary": "SUSE Bug 1223034 for CVE-2024-26882", "url": "https://bugzilla.suse.com/1223034" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26882" }, { "cve": "CVE-2024-26883", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26883" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stackmap overflow check on 32-bit arches\n\nThe stackmap code relies on roundup_pow_of_two() to compute the number\nof hash buckets, and contains an overflow check by checking if the\nresulting value is 0. However, on 32-bit arches, the roundup code itself\ncan overflow by doing a 32-bit left-shift of an unsigned long value,\nwhich is undefined behaviour, so it is not guaranteed to truncate\nneatly. This was triggered by syzbot on the DEVMAP_HASH type, which\ncontains the same check, copied from the hashtab code.\n\nThe commit in the fixes tag actually attempted to fix this, but the fix\ndid not account for the UB, so the fix only works on CPUs where an\noverflow does result in a neat truncation to zero, which is not\nguaranteed. Checking the value before rounding does not have this\nproblem.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26883", "url": "https://www.suse.com/security/cve/CVE-2024-26883" }, { "category": "external", "summary": "SUSE Bug 1223035 for CVE-2024-26883", "url": "https://bugzilla.suse.com/1223035" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26883" }, { "cve": "CVE-2024-26884", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26884" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix hashtab overflow check on 32-bit arches\n\nThe hashtab code relies on roundup_pow_of_two() to compute the number of\nhash buckets, and contains an overflow check by checking if the\nresulting value is 0. However, on 32-bit arches, the roundup code itself\ncan overflow by doing a 32-bit left-shift of an unsigned long value,\nwhich is undefined behaviour, so it is not guaranteed to truncate\nneatly. This was triggered by syzbot on the DEVMAP_HASH type, which\ncontains the same check, copied from the hashtab code. So apply the same\nfix to hashtab, by moving the overflow check to before the roundup.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26884", "url": "https://www.suse.com/security/cve/CVE-2024-26884" }, { "category": "external", "summary": "SUSE Bug 1223189 for CVE-2024-26884", "url": "https://bugzilla.suse.com/1223189" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26884" }, { "cve": "CVE-2024-26885", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26885" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix DEVMAP_HASH overflow check on 32-bit arches\n\nThe devmap code allocates a number hash buckets equal to the next power\nof two of the max_entries value provided when creating the map. When\nrounding up to the next power of two, the 32-bit variable storing the\nnumber of buckets can overflow, and the code checks for overflow by\nchecking if the truncated 32-bit value is equal to 0. However, on 32-bit\narches the rounding up itself can overflow mid-way through, because it\nends up doing a left-shift of 32 bits on an unsigned long value. If the\nsize of an unsigned long is four bytes, this is undefined behaviour, so\nthere is no guarantee that we\u0027ll end up with a nice and tidy 0-value at\nthe end.\n\nSyzbot managed to turn this into a crash on arm32 by creating a\nDEVMAP_HASH with max_entries \u003e 0x80000000 and then trying to update it.\nFix this by moving the overflow check to before the rounding up\noperation.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26885", "url": "https://www.suse.com/security/cve/CVE-2024-26885" }, { "category": "external", "summary": "SUSE Bug 1223190 for CVE-2024-26885", "url": "https://bugzilla.suse.com/1223190" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26885" }, { "cve": "CVE-2024-26891", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26891" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Don\u0027t issue ATS Invalidation request when device is disconnected\n\nFor those endpoint devices connect to system via hotplug capable ports,\nusers could request a hot reset to the device by flapping device\u0027s link\nthrough setting the slot\u0027s link control register, as pciehp_ist() DLLSC\ninterrupt sequence response, pciehp will unload the device driver and\nthen power it off. thus cause an IOMMU device-TLB invalidation (Intel\nVT-d spec, or ATS Invalidation in PCIe spec r6.1) request for non-existence\ntarget device to be sent and deadly loop to retry that request after ITE\nfault triggered in interrupt context.\n\nThat would cause following continuous hard lockup warning and system hang\n\n[ 4211.433662] pcieport 0000:17:01.0: pciehp: Slot(108): Link Down\n[ 4211.433664] pcieport 0000:17:01.0: pciehp: Slot(108): Card not present\n[ 4223.822591] NMI watchdog: Watchdog detected hard LOCKUP on cpu 144\n[ 4223.822622] CPU: 144 PID: 1422 Comm: irq/57-pciehp Kdump: loaded Tainted: G S\n OE kernel version xxxx\n[ 4223.822623] Hardware name: vendorname xxxx 666-106,\nBIOS 01.01.02.03.01 05/15/2023\n[ 4223.822623] RIP: 0010:qi_submit_sync+0x2c0/0x490\n[ 4223.822624] Code: 48 be 00 00 00 00 00 08 00 00 49 85 74 24 20 0f 95 c1 48 8b\n 57 10 83 c1 04 83 3c 1a 03 0f 84 a2 01 00 00 49 8b 04 24 8b 70 34 \u003c40\u003e f6 c6 1\n0 74 17 49 8b 04 24 8b 80 80 00 00 00 89 c2 d3 fa 41 39\n[ 4223.822624] RSP: 0018:ffffc4f074f0bbb8 EFLAGS: 00000093\n[ 4223.822625] RAX: ffffc4f040059000 RBX: 0000000000000014 RCX: 0000000000000005\n[ 4223.822625] RDX: ffff9f3841315800 RSI: 0000000000000000 RDI: ffff9f38401a8340\n[ 4223.822625] RBP: ffff9f38401a8340 R08: ffffc4f074f0bc00 R09: 0000000000000000\n[ 4223.822626] R10: 0000000000000010 R11: 0000000000000018 R12: ffff9f384005e200\n[ 4223.822626] R13: 0000000000000004 R14: 0000000000000046 R15: 0000000000000004\n[ 4223.822626] FS: 0000000000000000(0000) GS:ffffa237ae400000(0000)\nknlGS:0000000000000000\n[ 4223.822627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4223.822627] CR2: 00007ffe86515d80 CR3: 000002fd3000a001 CR4: 0000000000770ee0\n[ 4223.822627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4223.822628] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\n[ 4223.822628] PKRU: 55555554\n[ 4223.822628] Call Trace:\n[ 4223.822628] qi_flush_dev_iotlb+0xb1/0xd0\n[ 4223.822628] __dmar_remove_one_dev_info+0x224/0x250\n[ 4223.822629] dmar_remove_one_dev_info+0x3e/0x50\n[ 4223.822629] intel_iommu_release_device+0x1f/0x30\n[ 4223.822629] iommu_release_device+0x33/0x60\n[ 4223.822629] iommu_bus_notifier+0x7f/0x90\n[ 4223.822630] blocking_notifier_call_chain+0x60/0x90\n[ 4223.822630] device_del+0x2e5/0x420\n[ 4223.822630] pci_remove_bus_device+0x70/0x110\n[ 4223.822630] pciehp_unconfigure_device+0x7c/0x130\n[ 4223.822631] pciehp_disable_slot+0x6b/0x100\n[ 4223.822631] pciehp_handle_presence_or_link_change+0xd8/0x320\n[ 4223.822631] pciehp_ist+0x176/0x180\n[ 4223.822631] ? irq_finalize_oneshot.part.50+0x110/0x110\n[ 4223.822632] irq_thread_fn+0x19/0x50\n[ 4223.822632] irq_thread+0x104/0x190\n[ 4223.822632] ? irq_forced_thread_fn+0x90/0x90\n[ 4223.822632] ? irq_thread_check_affinity+0xe0/0xe0\n[ 4223.822633] kthread+0x114/0x130\n[ 4223.822633] ? __kthread_cancel_work+0x40/0x40\n[ 4223.822633] ret_from_fork+0x1f/0x30\n[ 4223.822633] Kernel panic - not syncing: Hard LOCKUP\n[ 4223.822634] CPU: 144 PID: 1422 Comm: irq/57-pciehp Kdump: loaded Tainted: G S\n OE kernel version xxxx\n[ 4223.822634] Hardware name: vendorname xxxx 666-106,\nBIOS 01.01.02.03.01 05/15/2023\n[ 4223.822634] Call Trace:\n[ 4223.822634] \u003cNMI\u003e\n[ 4223.822635] dump_stack+0x6d/0x88\n[ 4223.822635] panic+0x101/0x2d0\n[ 4223.822635] ? ret_from_fork+0x11/0x30\n[ 4223.822635] nmi_panic.cold.14+0xc/0xc\n[ 4223.822636] watchdog_overflow_callback.cold.8+0x6d/0x81\n[ 4223.822636] __perf_event_overflow+0x4f/0xf0\n[ 4223.822636] handle_pmi_common\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26891", "url": "https://www.suse.com/security/cve/CVE-2024-26891" }, { "category": "external", "summary": "SUSE Bug 1223037 for CVE-2024-26891", "url": "https://bugzilla.suse.com/1223037" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26891" }, { "cve": "CVE-2024-26893", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26893" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Fix double free in SMC transport cleanup path\n\nWhen the generic SCMI code tears down a channel, it calls the chan_free\ncallback function, defined by each transport. Since multiple protocols\nmight share the same transport_info member, chan_free() might want to\nclean up the same member multiple times within the given SCMI transport\nimplementation. In this case, it is SMC transport. This will lead to a NULL\npointer dereference at the second time:\n\n | scmi_protocol scmi_dev.1: Enabled polling mode TX channel - prot_id:16\n | arm-scmi firmware:scmi: SCMI Notifications - Core Enabled.\n | arm-scmi firmware:scmi: unable to communicate with SCMI\n | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n | Mem abort info:\n | ESR = 0x0000000096000004\n | EC = 0x25: DABT (current EL), IL = 32 bits\n | SET = 0, FnV = 0\n | EA = 0, S1PTW = 0\n | FSC = 0x04: level 0 translation fault\n | Data abort info:\n | ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n | CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n | GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n | user pgtable: 4k pages, 48-bit VAs, pgdp=0000000881ef8000\n | [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n | Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n | Modules linked in:\n | CPU: 4 PID: 1 Comm: swapper/0 Not tainted 6.7.0-rc2-00124-g455ef3d016c9-dirty #793\n | Hardware name: FVP Base RevC (DT)\n | pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n | pc : smc_chan_free+0x3c/0x6c\n | lr : smc_chan_free+0x3c/0x6c\n | Call trace:\n | smc_chan_free+0x3c/0x6c\n | idr_for_each+0x68/0xf8\n | scmi_cleanup_channels.isra.0+0x2c/0x58\n | scmi_probe+0x434/0x734\n | platform_probe+0x68/0xd8\n | really_probe+0x110/0x27c\n | __driver_probe_device+0x78/0x12c\n | driver_probe_device+0x3c/0x118\n | __driver_attach+0x74/0x128\n | bus_for_each_dev+0x78/0xe0\n | driver_attach+0x24/0x30\n | bus_add_driver+0xe4/0x1e8\n | driver_register+0x60/0x128\n | __platform_driver_register+0x28/0x34\n | scmi_driver_init+0x84/0xc0\n | do_one_initcall+0x78/0x33c\n | kernel_init_freeable+0x2b8/0x51c\n | kernel_init+0x24/0x130\n | ret_from_fork+0x10/0x20\n | Code: f0004701 910a0021 aa1403e5 97b91c70 (b9400280)\n | ---[ end trace 0000000000000000 ]---\n\nSimply check for the struct pointer being NULL before trying to access\nits members, to avoid this situation.\n\nThis was found when a transport doesn\u0027t really work (for instance no SMC\nservice), the probe routines then tries to clean up, and triggers a crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26893", "url": "https://www.suse.com/security/cve/CVE-2024-26893" }, { "category": "external", "summary": "SUSE Bug 1223196 for CVE-2024-26893", "url": "https://bugzilla.suse.com/1223196" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26893" }, { "cve": "CVE-2024-26895", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26895" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces\n\nwilc_netdev_cleanup currently triggers a KASAN warning, which can be\nobserved on interface registration error path, or simply by\nremoving the module/unbinding device from driver:\n\necho spi0.1 \u003e /sys/bus/spi/drivers/wilc1000_spi/unbind\n\n==================================================================\nBUG: KASAN: slab-use-after-free in wilc_netdev_cleanup+0x508/0x5cc\nRead of size 4 at addr c54d1ce8 by task sh/86\n\nCPU: 0 PID: 86 Comm: sh Not tainted 6.8.0-rc1+ #117\nHardware name: Atmel SAMA5\n unwind_backtrace from show_stack+0x18/0x1c\n show_stack from dump_stack_lvl+0x34/0x58\n dump_stack_lvl from print_report+0x154/0x500\n print_report from kasan_report+0xac/0xd8\n kasan_report from wilc_netdev_cleanup+0x508/0x5cc\n wilc_netdev_cleanup from wilc_bus_remove+0xc8/0xec\n wilc_bus_remove from spi_remove+0x8c/0xac\n spi_remove from device_release_driver_internal+0x434/0x5f8\n device_release_driver_internal from unbind_store+0xbc/0x108\n unbind_store from kernfs_fop_write_iter+0x398/0x584\n kernfs_fop_write_iter from vfs_write+0x728/0xf88\n vfs_write from ksys_write+0x110/0x1e4\n ksys_write from ret_fast_syscall+0x0/0x1c\n\n[...]\n\nAllocated by task 1:\n kasan_save_track+0x30/0x5c\n __kasan_kmalloc+0x8c/0x94\n __kmalloc_node+0x1cc/0x3e4\n kvmalloc_node+0x48/0x180\n alloc_netdev_mqs+0x68/0x11dc\n alloc_etherdev_mqs+0x28/0x34\n wilc_netdev_ifc_init+0x34/0x8ec\n wilc_cfg80211_init+0x690/0x910\n wilc_bus_probe+0xe0/0x4a0\n spi_probe+0x158/0x1b0\n really_probe+0x270/0xdf4\n __driver_probe_device+0x1dc/0x580\n driver_probe_device+0x60/0x140\n __driver_attach+0x228/0x5d4\n bus_for_each_dev+0x13c/0x1a8\n bus_add_driver+0x2a0/0x608\n driver_register+0x24c/0x578\n do_one_initcall+0x180/0x310\n kernel_init_freeable+0x424/0x484\n kernel_init+0x20/0x148\n ret_from_fork+0x14/0x28\n\nFreed by task 86:\n kasan_save_track+0x30/0x5c\n kasan_save_free_info+0x38/0x58\n __kasan_slab_free+0xe4/0x140\n kfree+0xb0/0x238\n device_release+0xc0/0x2a8\n kobject_put+0x1d4/0x46c\n netdev_run_todo+0x8fc/0x11d0\n wilc_netdev_cleanup+0x1e4/0x5cc\n wilc_bus_remove+0xc8/0xec\n spi_remove+0x8c/0xac\n device_release_driver_internal+0x434/0x5f8\n unbind_store+0xbc/0x108\n kernfs_fop_write_iter+0x398/0x584\n vfs_write+0x728/0xf88\n ksys_write+0x110/0x1e4\n ret_fast_syscall+0x0/0x1c\n [...]\n\nDavid Mosberger-Tan initial investigation [1] showed that this\nuse-after-free is due to netdevice unregistration during vif list\ntraversal. When unregistering a net device, since the needs_free_netdev has\nbeen set to true during registration, the netdevice object is also freed,\nand as a consequence, the corresponding vif object too, since it is\nattached to it as private netdevice data. The next occurrence of the loop\nthen tries to access freed vif pointer to the list to move forward in the\nlist.\n\nFix this use-after-free thanks to two mechanisms:\n- navigate in the list with list_for_each_entry_safe, which allows to\n safely modify the list as we go through each element. For each element,\n remove it from the list with list_del_rcu\n- make sure to wait for RCU grace period end after each vif removal to make\n sure it is safe to free the corresponding vif too (through\n unregister_netdev)\n\nSince we are in a RCU \"modifier\" path (not a \"reader\" path), and because\nsuch path is expected not to be concurrent to any other modifier (we are\nusing the vif_mutex lock), we do not need to use RCU list API, that\u0027s why\nwe can benefit from list_for_each_entry_safe.\n\n[1] https://lore.kernel.org/linux-wireless/ab077dbe58b1ea5de0a3b2ca21f275a07af967d2.camel@egauge.net/", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26895", "url": "https://www.suse.com/security/cve/CVE-2024-26895" }, { "category": "external", "summary": "SUSE Bug 1223197 for CVE-2024-26895", "url": "https://bugzilla.suse.com/1223197" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26895" }, { "cve": "CVE-2024-26896", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26896" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix memory leak when starting AP\n\nKmemleak reported this error:\n\n unreferenced object 0xd73d1180 (size 184):\n comm \"wpa_supplicant\", pid 1559, jiffies 13006305 (age 964.245s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 1e 00 01 00 00 00 00 00 ................\n backtrace:\n [\u003c5ca11420\u003e] kmem_cache_alloc+0x20c/0x5ac\n [\u003c127bdd74\u003e] __alloc_skb+0x144/0x170\n [\u003cfb8a5e38\u003e] __netdev_alloc_skb+0x50/0x180\n [\u003c0f9fa1d5\u003e] __ieee80211_beacon_get+0x290/0x4d4 [mac80211]\n [\u003c7accd02d\u003e] ieee80211_beacon_get_tim+0x54/0x18c [mac80211]\n [\u003c41e25cc3\u003e] wfx_start_ap+0xc8/0x234 [wfx]\n [\u003c93a70356\u003e] ieee80211_start_ap+0x404/0x6b4 [mac80211]\n [\u003ca4a661cd\u003e] nl80211_start_ap+0x76c/0x9e0 [cfg80211]\n [\u003c47bd8b68\u003e] genl_rcv_msg+0x198/0x378\n [\u003c453ef796\u003e] netlink_rcv_skb+0xd0/0x130\n [\u003c6b7c977a\u003e] genl_rcv+0x34/0x44\n [\u003c66b2d04d\u003e] netlink_unicast+0x1b4/0x258\n [\u003cf965b9b6\u003e] netlink_sendmsg+0x1e8/0x428\n [\u003caadb8231\u003e] ____sys_sendmsg+0x1e0/0x274\n [\u003cd2b5212d\u003e] ___sys_sendmsg+0x80/0xb4\n [\u003c69954f45\u003e] __sys_sendmsg+0x64/0xa8\n unreferenced object 0xce087000 (size 1024):\n comm \"wpa_supplicant\", pid 1559, jiffies 13006305 (age 964.246s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............\n backtrace:\n [\u003c9a993714\u003e] __kmalloc_track_caller+0x230/0x600\n [\u003cf83ea192\u003e] kmalloc_reserve.constprop.0+0x30/0x74\n [\u003ca2c61343\u003e] __alloc_skb+0xa0/0x170\n [\u003cfb8a5e38\u003e] __netdev_alloc_skb+0x50/0x180\n [\u003c0f9fa1d5\u003e] __ieee80211_beacon_get+0x290/0x4d4 [mac80211]\n [\u003c7accd02d\u003e] ieee80211_beacon_get_tim+0x54/0x18c [mac80211]\n [\u003c41e25cc3\u003e] wfx_start_ap+0xc8/0x234 [wfx]\n [\u003c93a70356\u003e] ieee80211_start_ap+0x404/0x6b4 [mac80211]\n [\u003ca4a661cd\u003e] nl80211_start_ap+0x76c/0x9e0 [cfg80211]\n [\u003c47bd8b68\u003e] genl_rcv_msg+0x198/0x378\n [\u003c453ef796\u003e] netlink_rcv_skb+0xd0/0x130\n [\u003c6b7c977a\u003e] genl_rcv+0x34/0x44\n [\u003c66b2d04d\u003e] netlink_unicast+0x1b4/0x258\n [\u003cf965b9b6\u003e] netlink_sendmsg+0x1e8/0x428\n [\u003caadb8231\u003e] ____sys_sendmsg+0x1e0/0x274\n [\u003cd2b5212d\u003e] ___sys_sendmsg+0x80/0xb4\n\nHowever, since the kernel is build optimized, it seems the stack is not\naccurate. It appears the issue is related to wfx_set_mfp_ap(). The issue\nis obvious in this function: memory allocated by ieee80211_beacon_get()\nis never released. Fixing this leak makes kmemleak happy.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26896", "url": "https://www.suse.com/security/cve/CVE-2024-26896" }, { "category": "external", "summary": "SUSE Bug 1223042 for CVE-2024-26896", "url": "https://bugzilla.suse.com/1223042" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26896" }, { "cve": "CVE-2024-26897", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26897" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete\n\nThe ath9k_wmi_event_tasklet() used in ath9k_htc assumes that all the data\nstructures have been fully initialised by the time it runs. However, because of\nthe order in which things are initialised, this is not guaranteed to be the\ncase, because the device is exposed to the USB subsystem before the ath9k driver\ninitialisation is completed.\n\nWe already committed a partial fix for this in commit:\n8b3046abc99e (\"ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()\")\n\nHowever, that commit only aborted the WMI_TXSTATUS_EVENTID command in the event\ntasklet, pairing it with an \"initialisation complete\" bit in the TX struct. It\nseems syzbot managed to trigger the race for one of the other commands as well,\nso let\u0027s just move the existing synchronisation bit to cover the whole\ntasklet (setting it at the end of ath9k_htc_probe_device() instead of inside\nath9k_tx_init()).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26897", "url": "https://www.suse.com/security/cve/CVE-2024-26897" }, { "category": "external", "summary": "SUSE Bug 1223323 for CVE-2024-26897", "url": "https://bugzilla.suse.com/1223323" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26897" }, { "cve": "CVE-2024-26898", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26898" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\n\nThis patch is against CVE-2023-6270. The description of cve is:\n\n A flaw was found in the ATA over Ethernet (AoE) driver in the Linux\n kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on\n `struct net_device`, and a use-after-free can be triggered by racing\n between the free on the struct and the access through the `skbtxq`\n global queue. This could lead to a denial of service condition or\n potential code execution.\n\nIn aoecmd_cfg_pkts(), it always calls dev_put(ifp) when skb initial\ncode is finished. But the net_device ifp will still be used in\nlater tx()-\u003edev_queue_xmit() in kthread. Which means that the\ndev_put(ifp) should NOT be called in the success path of skb\ninitial code in aoecmd_cfg_pkts(). Otherwise tx() may run into\nuse-after-free because the net_device is freed.\n\nThis patch removed the dev_put(ifp) in the success path in\naoecmd_cfg_pkts(), and added dev_put() after skb xmit in tx().", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26898", "url": "https://www.suse.com/security/cve/CVE-2024-26898" }, { "category": "external", "summary": "SUSE Bug 1218562 for CVE-2024-26898", "url": "https://bugzilla.suse.com/1218562" }, { "category": "external", "summary": "SUSE Bug 1223016 for CVE-2024-26898", "url": "https://bugzilla.suse.com/1223016" }, { "category": "external", "summary": "SUSE Bug 1223017 for CVE-2024-26898", "url": "https://bugzilla.suse.com/1223017" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-26898" }, { "cve": "CVE-2024-26901", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26901" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndo_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak\n\nsyzbot identified a kernel information leak vulnerability in\ndo_sys_name_to_handle() and issued the following report [1].\n\n[1]\n\"BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline]\nBUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x100 lib/usercopy.c:40\n instrument_copy_to_user include/linux/instrumented.h:114 [inline]\n _copy_to_user+0xbc/0x100 lib/usercopy.c:40\n copy_to_user include/linux/uaccess.h:191 [inline]\n do_sys_name_to_handle fs/fhandle.c:73 [inline]\n __do_sys_name_to_handle_at fs/fhandle.c:112 [inline]\n __se_sys_name_to_handle_at+0x949/0xb10 fs/fhandle.c:94\n __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94\n ...\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517\n __do_kmalloc_node mm/slab_common.c:1006 [inline]\n __kmalloc+0x121/0x3c0 mm/slab_common.c:1020\n kmalloc include/linux/slab.h:604 [inline]\n do_sys_name_to_handle fs/fhandle.c:39 [inline]\n __do_sys_name_to_handle_at fs/fhandle.c:112 [inline]\n __se_sys_name_to_handle_at+0x441/0xb10 fs/fhandle.c:94\n __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94\n ...\n\nBytes 18-19 of 20 are uninitialized\nMemory access of size 20 starts at ffff888128a46380\nData copied to user address 0000000020000240\"\n\nPer Chuck Lever\u0027s suggestion, use kzalloc() instead of kmalloc() to\nsolve the problem.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26901", "url": "https://www.suse.com/security/cve/CVE-2024-26901" }, { "category": "external", "summary": "SUSE Bug 1223198 for CVE-2024-26901", "url": "https://bugzilla.suse.com/1223198" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26901" }, { "cve": "CVE-2024-26903", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26903" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security\n\nDuring our fuzz testing of the connection and disconnection process at the\nRFCOMM layer, we discovered this bug. By comparing the packets from a\nnormal connection and disconnection process with the testcase that\ntriggered a KASAN report. We analyzed the cause of this bug as follows:\n\n1. In the packets captured during a normal connection, the host sends a\n`Read Encryption Key Size` type of `HCI_CMD` packet\n(Command Opcode: 0x1408) to the controller to inquire the length of\nencryption key.After receiving this packet, the controller immediately\nreplies with a Command Completepacket (Event Code: 0x0e) to return the\nEncryption Key Size.\n\n2. In our fuzz test case, the timing of the controller\u0027s response to this\npacket was delayed to an unexpected point: after the RFCOMM and L2CAP\nlayers had disconnected but before the HCI layer had disconnected.\n\n3. After receiving the Encryption Key Size Response at the time described\nin point 2, the host still called the rfcomm_check_security function.\nHowever, by this time `struct l2cap_conn *conn = l2cap_pi(sk)-\u003echan-\u003econn;`\nhad already been released, and when the function executed\n`return hci_conn_security(conn-\u003ehcon, d-\u003esec_level, auth_type, d-\u003eout);`,\nspecifically when accessing `conn-\u003ehcon`, a null-ptr-deref error occurred.\n\nTo fix this bug, check if `sk-\u003esk_state` is BT_CLOSED before calling\nrfcomm_recv_frame in rfcomm_process_rx.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26903", "url": "https://www.suse.com/security/cve/CVE-2024-26903" }, { "category": "external", "summary": "SUSE Bug 1223187 for CVE-2024-26903", "url": "https://bugzilla.suse.com/1223187" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26903" }, { "cve": "CVE-2024-26915", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26915" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Reset IH OVERFLOW_CLEAR bit\n\nAllows us to detect subsequent IH ring buffer overflows as well.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26915", "url": "https://www.suse.com/security/cve/CVE-2024-26915" }, { "category": "external", "summary": "SUSE Bug 1223207 for CVE-2024-26915", "url": "https://bugzilla.suse.com/1223207" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26915" }, { "cve": "CVE-2024-26917", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26917" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: Revert \"scsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\"\n\nThis reverts commit 1a1975551943f681772720f639ff42fbaa746212.\n\nThis commit causes interrupts to be lost for FCoE devices, since it changed\nsping locks from \"bh\" to \"irqsave\".\n\nInstead, a work queue should be used, and will be addressed in a separate\ncommit.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26917", "url": "https://www.suse.com/security/cve/CVE-2024-26917" }, { "category": "external", "summary": "SUSE Bug 1223056 for CVE-2024-26917", "url": "https://bugzilla.suse.com/1223056" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26917" }, { "cve": "CVE-2024-26927", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26927" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Add some bounds checking to firmware data\n\nSmatch complains about \"head-\u003efull_size - head-\u003eheader_size\" can\nunderflow. To some extent, we\u0027re always going to have to trust the\nfirmware a bit. However, it\u0027s easy enough to add a check for negatives,\nand let\u0027s add a upper bounds check as well.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26927", "url": "https://www.suse.com/security/cve/CVE-2024-26927" }, { "category": "external", "summary": "SUSE Bug 1223525 for CVE-2024-26927", "url": "https://bugzilla.suse.com/1223525" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26927" }, { "cve": "CVE-2024-26933", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26933" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Fix deadlock in port \"disable\" sysfs attribute\n\nThe show and store callback routines for the \"disable\" sysfs attribute\nfile in port.c acquire the device lock for the port\u0027s parent hub\ndevice. This can cause problems if another process has locked the hub\nto remove it or change its configuration:\n\n\tRemoving the hub or changing its configuration requires the\n\thub interface to be removed, which requires the port device\n\tto be removed, and device_del() waits until all outstanding\n\tsysfs attribute callbacks for the ports have returned. The\n\tlock can\u0027t be released until then.\n\n\tBut the disable_show() or disable_store() routine can\u0027t return\n\tuntil after it has acquired the lock.\n\nThe resulting deadlock can be avoided by calling\nsysfs_break_active_protection(). This will cause the sysfs core not\nto wait for the attribute\u0027s callback routine to return, allowing the\nremoval to proceed. The disadvantage is that after making this call,\nthere is no guarantee that the hub structure won\u0027t be deallocated at\nany moment. To prevent this, we have to acquire a reference to it\nfirst by calling hub_get().", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26933", "url": "https://www.suse.com/security/cve/CVE-2024-26933" }, { "category": "external", "summary": "SUSE Bug 1223670 for CVE-2024-26933", "url": "https://bugzilla.suse.com/1223670" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26933" }, { "cve": "CVE-2024-26939", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26939" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/vma: Fix UAF on destroy against retire race\n\nObject debugging tools were sporadically reporting illegal attempts to\nfree a still active i915 VMA object when parking a GT believed to be idle.\n\n[161.359441] ODEBUG: free active (active state 0) object: ffff88811643b958 object type: i915_active hint: __i915_vma_active+0x0/0x50 [i915]\n[161.360082] WARNING: CPU: 5 PID: 276 at lib/debugobjects.c:514 debug_print_object+0x80/0xb0\n...\n[161.360304] CPU: 5 PID: 276 Comm: kworker/5:2 Not tainted 6.5.0-rc1-CI_DRM_13375-g003f860e5577+ #1\n[161.360314] Hardware name: Intel Corporation Rocket Lake Client Platform/RocketLake S UDIMM 6L RVP, BIOS RKLSFWI1.R00.3173.A03.2204210138 04/21/2022\n[161.360322] Workqueue: i915-unordered __intel_wakeref_put_work [i915]\n[161.360592] RIP: 0010:debug_print_object+0x80/0xb0\n...\n[161.361347] debug_object_free+0xeb/0x110\n[161.361362] i915_active_fini+0x14/0x130 [i915]\n[161.361866] release_references+0xfe/0x1f0 [i915]\n[161.362543] i915_vma_parked+0x1db/0x380 [i915]\n[161.363129] __gt_park+0x121/0x230 [i915]\n[161.363515] ____intel_wakeref_put_last+0x1f/0x70 [i915]\n\nThat has been tracked down to be happening when another thread is\ndeactivating the VMA inside __active_retire() helper, after the VMA\u0027s\nactive counter has been already decremented to 0, but before deactivation\nof the VMA\u0027s object is reported to the object debugging tool.\n\nWe could prevent from that race by serializing i915_active_fini() with\n__active_retire() via ref-\u003etree_lock, but that wouldn\u0027t stop the VMA from\nbeing used, e.g. from __i915_vma_retire() called at the end of\n__active_retire(), after that VMA has been already freed by a concurrent\ni915_vma_destroy() on return from the i915_active_fini(). Then, we should\nrather fix the issue at the VMA level, not in i915_active.\n\nSince __i915_vma_parked() is called from __gt_park() on last put of the\nGT\u0027s wakeref, the issue could be addressed by holding the GT wakeref long\nenough for __active_retire() to complete before that wakeref is released\nand the GT parked.\n\nI believe the issue was introduced by commit d93939730347 (\"drm/i915:\nRemove the vma refcount\") which moved a call to i915_active_fini() from\na dropped i915_vma_release(), called on last put of the removed VMA kref,\nto i915_vma_parked() processing path called on last put of a GT wakeref.\nHowever, its visibility to the object debugging tool was suppressed by a\nbug in i915_active that was fixed two weeks later with commit e92eb246feb9\n(\"drm/i915/active: Fix missing debug object activation\").\n\nA VMA associated with a request doesn\u0027t acquire a GT wakeref by itself.\nInstead, it depends on a wakeref held directly by the request\u0027s active\nintel_context for a GT associated with its VM, and indirectly on that\nintel_context\u0027s engine wakeref if the engine belongs to the same GT as the\nVMA\u0027s VM. Those wakerefs are released asynchronously to VMA deactivation.\n\nFix the issue by getting a wakeref for the VMA\u0027s GT when activating it,\nand putting that wakeref only after the VMA is deactivated. However,\nexclude global GTT from that processing path, otherwise the GPU never goes\nidle. Since __i915_vma_retire() may be called from atomic contexts, use\nasync variant of wakeref put. Also, to avoid circular locking dependency,\ntake care of acquiring the wakeref before VM mutex when both are needed.\n\nv7: Add inline comments with justifications for:\n - using untracked variants of intel_gt_pm_get/put() (Nirmoy),\n - using async variant of _put(),\n - not getting the wakeref in case of a global GTT,\n - always getting the first wakeref outside vm-\u003emutex.\nv6: Since __i915_vma_active/retire() callbacks are not serialized, storing\n a wakeref tracking handle inside struct i915_vma is not safe, and\n there is no other good place for that. Use untracked variants of\n intel_gt_pm_get/put_async().\nv5: Replace \"tile\" with \"GT\" across commit description (Rodrigo),\n - \n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26939", "url": "https://www.suse.com/security/cve/CVE-2024-26939" }, { "category": "external", "summary": "SUSE Bug 1223679 for CVE-2024-26939", "url": "https://bugzilla.suse.com/1223679" }, { "category": "external", "summary": "SUSE Bug 1223680 for CVE-2024-26939", "url": "https://bugzilla.suse.com/1223680" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-26939" }, { "cve": "CVE-2024-26948", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26948" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add a dc_state NULL check in dc_state_release\n\n[How]\nCheck wheather state is NULL before releasing it.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26948", "url": "https://www.suse.com/security/cve/CVE-2024-26948" }, { "category": "external", "summary": "SUSE Bug 1223664 for CVE-2024-26948", "url": "https://bugzilla.suse.com/1223664" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26948" }, { "cve": "CVE-2024-26950", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26950" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: netlink: access device through ctx instead of peer\n\nThe previous commit fixed a bug that led to a NULL peer-\u003edevice being\ndereferenced. It\u0027s actually easier and faster performance-wise to\ninstead get the device from ctx-\u003ewg. This semantically makes more sense\ntoo, since ctx-\u003ewg-\u003epeer_allowedips.seq is compared with\nctx-\u003eallowedips_seq, basing them both in ctx. This also acts as a\ndefence in depth provision against freed peers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26950", "url": "https://www.suse.com/security/cve/CVE-2024-26950" }, { "category": "external", "summary": "SUSE Bug 1223661 for CVE-2024-26950", "url": "https://bugzilla.suse.com/1223661" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26950" }, { "cve": "CVE-2024-26951", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26951" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: netlink: check for dangling peer via is_dead instead of empty list\n\nIf all peers are removed via wg_peer_remove_all(), rather than setting\npeer_list to empty, the peer is added to a temporary list with a head on\nthe stack of wg_peer_remove_all(). If a netlink dump is resumed and the\ncursored peer is one that has been removed via wg_peer_remove_all(), it\nwill iterate from that peer and then attempt to dump freed peers.\n\nFix this by instead checking peer-\u003eis_dead, which was explictly created\nfor this purpose. Also move up the device_update_lock lockdep assertion,\nsince reading is_dead relies on that.\n\nIt can be reproduced by a small script like:\n\n echo \"Setting config...\"\n ip link add dev wg0 type wireguard\n wg setconf wg0 /big-config\n (\n while true; do\n echo \"Showing config...\"\n wg showconf wg0 \u003e /dev/null\n done\n ) \u0026\n sleep 4\n wg setconf wg0 \u003c(printf \"[Peer]\\nPublicKey=$(wg genkey)\\n\")\n\nResulting in:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20\n Read of size 8 at addr ffff88811956ec70 by task wg/59\n CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x70\n print_address_description.constprop.0+0x2c/0x380\n print_report+0xab/0x250\n kasan_report+0xba/0xf0\n __lock_acquire+0x182a/0x1b20\n lock_acquire+0x191/0x4b0\n down_read+0x80/0x440\n get_peer+0x140/0xcb0\n wg_get_device_dump+0x471/0x1130", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26951", "url": "https://www.suse.com/security/cve/CVE-2024-26951" }, { "category": "external", "summary": "SUSE Bug 1223660 for CVE-2024-26951", "url": "https://bugzilla.suse.com/1223660" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26951" }, { "cve": "CVE-2024-26955", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26955" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent kernel bug at submit_bh_wbc()\n\nFix a bug where nilfs_get_block() returns a successful status when\nsearching and inserting the specified block both fail inconsistently. If\nthis inconsistent behavior is not due to a previously fixed bug, then an\nunexpected race is occurring, so return a temporary error -EAGAIN instead.\n\nThis prevents callers such as __block_write_begin_int() from requesting a\nread into a buffer that is not mapped, which would cause the BUG_ON check\nfor the BH_Mapped flag in submit_bh_wbc() to fail.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26955", "url": "https://www.suse.com/security/cve/CVE-2024-26955" }, { "category": "external", "summary": "SUSE Bug 1223657 for CVE-2024-26955", "url": "https://bugzilla.suse.com/1223657" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26955" }, { "cve": "CVE-2024-26956", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26956" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix failure to detect DAT corruption in btree and direct mappings\n\nPatch series \"nilfs2: fix kernel bug at submit_bh_wbc()\".\n\nThis resolves a kernel BUG reported by syzbot. Since there are two\nflaws involved, I\u0027ve made each one a separate patch.\n\nThe first patch alone resolves the syzbot-reported bug, but I think\nboth fixes should be sent to stable, so I\u0027ve tagged them as such.\n\n\nThis patch (of 2):\n\nSyzbot has reported a kernel bug in submit_bh_wbc() when writing file data\nto a nilfs2 file system whose metadata is corrupted.\n\nThere are two flaws involved in this issue.\n\nThe first flaw is that when nilfs_get_block() locates a data block using\nbtree or direct mapping, if the disk address translation routine\nnilfs_dat_translate() fails with internal code -ENOENT due to DAT metadata\ncorruption, it can be passed back to nilfs_get_block(). This causes\nnilfs_get_block() to misidentify an existing block as non-existent,\ncausing both data block lookup and insertion to fail inconsistently.\n\nThe second flaw is that nilfs_get_block() returns a successful status in\nthis inconsistent state. This causes the caller __block_write_begin_int()\nor others to request a read even though the buffer is not mapped,\nresulting in a BUG_ON check for the BH_Mapped flag in submit_bh_wbc()\nfailing.\n\nThis fixes the first issue by changing the return value to code -EINVAL\nwhen a conversion using DAT fails with code -ENOENT, avoiding the\nconflicting condition that leads to the kernel bug described above. Here,\ncode -EINVAL indicates that metadata corruption was detected during the\nblock lookup, which will be properly handled as a file system error and\nconverted to -EIO when passing through the nilfs2 bmap layer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26956", "url": "https://www.suse.com/security/cve/CVE-2024-26956" }, { "category": "external", "summary": "SUSE Bug 1223663 for CVE-2024-26956", "url": "https://bugzilla.suse.com/1223663" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26956" }, { "cve": "CVE-2024-26960", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26960" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: swap: fix race between free_swap_and_cache() and swapoff()\n\nThere was previously a theoretical window where swapoff() could run and\nteardown a swap_info_struct while a call to free_swap_and_cache() was\nrunning in another thread. This could cause, amongst other bad\npossibilities, swap_page_trans_huge_swapped() (called by\nfree_swap_and_cache()) to access the freed memory for swap_map.\n\nThis is a theoretical problem and I haven\u0027t been able to provoke it from a\ntest case. But there has been agreement based on code review that this is\npossible (see link below).\n\nFix it by using get_swap_device()/put_swap_device(), which will stall\nswapoff(). There was an extra check in _swap_info_get() to confirm that\nthe swap entry was not free. This isn\u0027t present in get_swap_device()\nbecause it doesn\u0027t make sense in general due to the race between getting\nthe reference and swapoff. So I\u0027ve added an equivalent check directly in\nfree_swap_and_cache().\n\nDetails of how to provoke one possible issue (thanks to David Hildenbrand\nfor deriving this):\n\n--8\u003c-----\n\n__swap_entry_free() might be the last user and result in\n\"count == SWAP_HAS_CACHE\".\n\nswapoff-\u003etry_to_unuse() will stop as soon as soon as si-\u003einuse_pages==0.\n\nSo the question is: could someone reclaim the folio and turn\nsi-\u003einuse_pages==0, before we completed swap_page_trans_huge_swapped().\n\nImagine the following: 2 MiB folio in the swapcache. Only 2 subpages are\nstill references by swap entries.\n\nProcess 1 still references subpage 0 via swap entry.\nProcess 2 still references subpage 1 via swap entry.\n\nProcess 1 quits. Calls free_swap_and_cache().\n-\u003e count == SWAP_HAS_CACHE\n[then, preempted in the hypervisor etc.]\n\nProcess 2 quits. Calls free_swap_and_cache().\n-\u003e count == SWAP_HAS_CACHE\n\nProcess 2 goes ahead, passes swap_page_trans_huge_swapped(), and calls\n__try_to_reclaim_swap().\n\n__try_to_reclaim_swap()-\u003efolio_free_swap()-\u003edelete_from_swap_cache()-\u003e\nput_swap_folio()-\u003efree_swap_slot()-\u003eswapcache_free_entries()-\u003e\nswap_entry_free()-\u003eswap_range_free()-\u003e\n...\nWRITE_ONCE(si-\u003einuse_pages, si-\u003einuse_pages - nr_entries);\n\nWhat stops swapoff to succeed after process 2 reclaimed the swap cache\nbut before process1 finished its call to swap_page_trans_huge_swapped()?\n\n--8\u003c-----", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26960", "url": "https://www.suse.com/security/cve/CVE-2024-26960" }, { "category": "external", "summary": "SUSE Bug 1223655 for CVE-2024-26960", "url": "https://bugzilla.suse.com/1223655" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26960" }, { "cve": "CVE-2024-26965", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26965" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: mmcc-msm8974: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().\n\nOnly compile tested.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26965", "url": "https://www.suse.com/security/cve/CVE-2024-26965" }, { "category": "external", "summary": "SUSE Bug 1223648 for CVE-2024-26965", "url": "https://bugzilla.suse.com/1223648" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26965" }, { "cve": "CVE-2024-26966", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26966" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: mmcc-apq8084: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().\n\nOnly compile tested.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26966", "url": "https://www.suse.com/security/cve/CVE-2024-26966" }, { "category": "external", "summary": "SUSE Bug 1223646 for CVE-2024-26966", "url": "https://bugzilla.suse.com/1223646" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26966" }, { "cve": "CVE-2024-26969", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26969" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().\n\nOnly compile tested.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26969", "url": "https://www.suse.com/security/cve/CVE-2024-26969" }, { "category": "external", "summary": "SUSE Bug 1223645 for CVE-2024-26969", "url": "https://bugzilla.suse.com/1223645" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26969" }, { "cve": "CVE-2024-26970", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26970" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gcc-ipq6018: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().\n\nOnly compile tested.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26970", "url": "https://www.suse.com/security/cve/CVE-2024-26970" }, { "category": "external", "summary": "SUSE Bug 1223644 for CVE-2024-26970", "url": "https://bugzilla.suse.com/1223644" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26970" }, { "cve": "CVE-2024-26972", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26972" } ], "notes": [ { "category": "general", "text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26972", "url": "https://www.suse.com/security/cve/CVE-2024-26972" }, { "category": "external", "summary": "SUSE Bug 1223643 for CVE-2024-26972", "url": "https://bugzilla.suse.com/1223643" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26972" }, { "cve": "CVE-2024-26979", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26979" } ], "notes": [ { "category": "general", "text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26979", "url": "https://www.suse.com/security/cve/CVE-2024-26979" }, { "category": "external", "summary": "SUSE Bug 1223628 for CVE-2024-26979", "url": "https://bugzilla.suse.com/1223628" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 0, "baseSeverity": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26979" }, { "cve": "CVE-2024-26981", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26981" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix OOB in nilfs_set_de_type\n\nThe size of the nilfs_type_by_mode array in the fs/nilfs2/dir.c file is\ndefined as \"S_IFMT \u003e\u003e S_SHIFT\", but the nilfs_set_de_type() function,\nwhich uses this array, specifies the index to read from the array in the\nsame way as \"(mode \u0026 S_IFMT) \u003e\u003e S_SHIFT\".\n\nstatic void nilfs_set_de_type(struct nilfs_dir_entry *de, struct inode\n *inode)\n{\n\tumode_t mode = inode-\u003ei_mode;\n\n\tde-\u003efile_type = nilfs_type_by_mode[(mode \u0026 S_IFMT)\u003e\u003eS_SHIFT]; // oob\n}\n\nHowever, when the index is determined this way, an out-of-bounds (OOB)\nerror occurs by referring to an index that is 1 larger than the array size\nwhen the condition \"mode \u0026 S_IFMT == S_IFMT\" is satisfied. Therefore, a\npatch to resize the nilfs_type_by_mode array should be applied to prevent\nOOB errors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26981", "url": "https://www.suse.com/security/cve/CVE-2024-26981" }, { "category": "external", "summary": "SUSE Bug 1223668 for CVE-2024-26981", "url": "https://bugzilla.suse.com/1223668" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26981" }, { "cve": "CVE-2024-26982", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26982" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSquashfs: check the inode number is not the invalid value of zero\n\nSyskiller has produced an out of bounds access in fill_meta_index().\n\nThat out of bounds access is ultimately caused because the inode\nhas an inode number with the invalid value of zero, which was not checked.\n\nThe reason this causes the out of bounds access is due to following\nsequence of events:\n\n1. Fill_meta_index() is called to allocate (via empty_meta_index())\n and fill a metadata index. It however suffers a data read error\n and aborts, invalidating the newly returned empty metadata index.\n It does this by setting the inode number of the index to zero,\n which means unused (zero is not a valid inode number).\n\n2. When fill_meta_index() is subsequently called again on another\n read operation, locate_meta_index() returns the previous index\n because it matches the inode number of 0. Because this index\n has been returned it is expected to have been filled, and because\n it hasn\u0027t been, an out of bounds access is performed.\n\nThis patch adds a sanity check which checks that the inode number\nis not zero when the inode is created and returns -EINVAL if it is.\n\n[phillip@squashfs.org.uk: whitespace fix]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26982", "url": "https://www.suse.com/security/cve/CVE-2024-26982" }, { "category": "external", "summary": "SUSE Bug 1223634 for CVE-2024-26982", "url": "https://bugzilla.suse.com/1223634" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26982" }, { "cve": "CVE-2024-26993", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-26993" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: sysfs: Fix reference leak in sysfs_break_active_protection()\n\nThe sysfs_break_active_protection() routine has an obvious reference\nleak in its error path. If the call to kernfs_find_and_get() fails then\nkn will be NULL, so the companion sysfs_unbreak_active_protection()\nroutine won\u0027t get called (and would only cause an access violation by\ntrying to dereference kn-\u003eparent if it was called). As a result, the\nreference to kobj acquired at the start of the function will never be\nreleased.\n\nFix the leak by adding an explicit kobject_put() call when kn is NULL.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-26993", "url": "https://www.suse.com/security/cve/CVE-2024-26993" }, { "category": "external", "summary": "SUSE Bug 1223693 for CVE-2024-26993", "url": "https://bugzilla.suse.com/1223693" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-26993" }, { "cve": "CVE-2024-27013", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27013" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntun: limit printing rate when illegal packet received by tun dev\n\nvhost_worker will call tun call backs to receive packets. If too many\nillegal packets arrives, tun_do_read will keep dumping packet contents.\nWhen console is enabled, it will costs much more cpu time to dump\npacket and soft lockup will be detected.\n\nnet_ratelimit mechanism can be used to limit the dumping rate.\n\nPID: 33036 TASK: ffff949da6f20000 CPU: 23 COMMAND: \"vhost-32980\"\n #0 [fffffe00003fce50] crash_nmi_callback at ffffffff89249253\n #1 [fffffe00003fce58] nmi_handle at ffffffff89225fa3\n #2 [fffffe00003fceb0] default_do_nmi at ffffffff8922642e\n #3 [fffffe00003fced0] do_nmi at ffffffff8922660d\n #4 [fffffe00003fcef0] end_repeat_nmi at ffffffff89c01663\n [exception RIP: io_serial_in+20]\n RIP: ffffffff89792594 RSP: ffffa655314979e8 RFLAGS: 00000002\n RAX: ffffffff89792500 RBX: ffffffff8af428a0 RCX: 0000000000000000\n RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8af428a0\n RBP: 0000000000002710 R8: 0000000000000004 R9: 000000000000000f\n R10: 0000000000000000 R11: ffffffff8acbf64f R12: 0000000000000020\n R13: ffffffff8acbf698 R14: 0000000000000058 R15: 0000000000000000\n ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018\n #5 [ffffa655314979e8] io_serial_in at ffffffff89792594\n #6 [ffffa655314979e8] wait_for_xmitr at ffffffff89793470\n #7 [ffffa65531497a08] serial8250_console_putchar at ffffffff897934f6\n #8 [ffffa65531497a20] uart_console_write at ffffffff8978b605\n #9 [ffffa65531497a48] serial8250_console_write at ffffffff89796558\n #10 [ffffa65531497ac8] console_unlock at ffffffff89316124\n #11 [ffffa65531497b10] vprintk_emit at ffffffff89317c07\n #12 [ffffa65531497b68] printk at ffffffff89318306\n #13 [ffffa65531497bc8] print_hex_dump at ffffffff89650765\n #14 [ffffa65531497ca8] tun_do_read at ffffffffc0b06c27 [tun]\n #15 [ffffa65531497d38] tun_recvmsg at ffffffffc0b06e34 [tun]\n #16 [ffffa65531497d68] handle_rx at ffffffffc0c5d682 [vhost_net]\n #17 [ffffa65531497ed0] vhost_worker at ffffffffc0c644dc [vhost]\n #18 [ffffa65531497f10] kthread at ffffffff892d2e72\n #19 [ffffa65531497f50] ret_from_fork at ffffffff89c0022f", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27013", "url": "https://www.suse.com/security/cve/CVE-2024-27013" }, { "category": "external", "summary": "SUSE Bug 1223745 for CVE-2024-27013", "url": "https://bugzilla.suse.com/1223745" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27013" }, { "cve": "CVE-2024-27014", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27014" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent deadlock while disabling aRFS\n\nWhen disabling aRFS under the `priv-\u003estate_lock`, any scheduled\naRFS works are canceled using the `cancel_work_sync` function,\nwhich waits for the work to end if it has already started.\nHowever, while waiting for the work handler, the handler will\ntry to acquire the `state_lock` which is already acquired.\n\nThe worker acquires the lock to delete the rules if the state\nis down, which is not the worker\u0027s responsibility since\ndisabling aRFS deletes the rules.\n\nAdd an aRFS state variable, which indicates whether the aRFS is\nenabled and prevent adding rules when the aRFS is disabled.\n\nKernel log:\n\n======================================================\nWARNING: possible circular locking dependency detected\n6.7.0-rc4_net_next_mlx5_5483eb2 #1 Tainted: G I\n------------------------------------------------------\nethtool/386089 is trying to acquire lock:\nffff88810f21ce68 ((work_completion)(\u0026rule-\u003earfs_work)){+.+.}-{0:0}, at: __flush_work+0x74/0x4e0\n\nbut task is already holding lock:\nffff8884a1808cc0 (\u0026priv-\u003estate_lock){+.+.}-{3:3}, at: mlx5e_ethtool_set_channels+0x53/0x200 [mlx5_core]\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-\u003e #1 (\u0026priv-\u003estate_lock){+.+.}-{3:3}:\n __mutex_lock+0x80/0xc90\n arfs_handle_work+0x4b/0x3b0 [mlx5_core]\n process_one_work+0x1dc/0x4a0\n worker_thread+0x1bf/0x3c0\n kthread+0xd7/0x100\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x11/0x20\n\n-\u003e #0 ((work_completion)(\u0026rule-\u003earfs_work)){+.+.}-{0:0}:\n __lock_acquire+0x17b4/0x2c80\n lock_acquire+0xd0/0x2b0\n __flush_work+0x7a/0x4e0\n __cancel_work_timer+0x131/0x1c0\n arfs_del_rules+0x143/0x1e0 [mlx5_core]\n mlx5e_arfs_disable+0x1b/0x30 [mlx5_core]\n mlx5e_ethtool_set_channels+0xcb/0x200 [mlx5_core]\n ethnl_set_channels+0x28f/0x3b0\n ethnl_default_set_doit+0xec/0x240\n genl_family_rcv_msg_doit+0xd0/0x120\n genl_rcv_msg+0x188/0x2c0\n netlink_rcv_skb+0x54/0x100\n genl_rcv+0x24/0x40\n netlink_unicast+0x1a1/0x270\n netlink_sendmsg+0x214/0x460\n __sock_sendmsg+0x38/0x60\n __sys_sendto+0x113/0x170\n __x64_sys_sendto+0x20/0x30\n do_syscall_64+0x40/0xe0\n entry_SYSCALL_64_after_hwframe+0x46/0x4e\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026priv-\u003estate_lock);\n lock((work_completion)(\u0026rule-\u003earfs_work));\n lock(\u0026priv-\u003estate_lock);\n lock((work_completion)(\u0026rule-\u003earfs_work));\n\n *** DEADLOCK ***\n\n3 locks held by ethtool/386089:\n #0: ffffffff82ea7210 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40\n #1: ffffffff82e94c88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_set_doit+0xd3/0x240\n #2: ffff8884a1808cc0 (\u0026priv-\u003estate_lock){+.+.}-{3:3}, at: mlx5e_ethtool_set_channels+0x53/0x200 [mlx5_core]\n\nstack backtrace:\nCPU: 15 PID: 386089 Comm: ethtool Tainted: G I 6.7.0-rc4_net_next_mlx5_5483eb2 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x60/0xa0\n check_noncircular+0x144/0x160\n __lock_acquire+0x17b4/0x2c80\n lock_acquire+0xd0/0x2b0\n ? __flush_work+0x74/0x4e0\n ? save_trace+0x3e/0x360\n ? __flush_work+0x74/0x4e0\n __flush_work+0x7a/0x4e0\n ? __flush_work+0x74/0x4e0\n ? __lock_acquire+0xa78/0x2c80\n ? lock_acquire+0xd0/0x2b0\n ? mark_held_locks+0x49/0x70\n __cancel_work_timer+0x131/0x1c0\n ? mark_held_locks+0x49/0x70\n arfs_del_rules+0x143/0x1e0 [mlx5_core]\n mlx5e_arfs_disable+0x1b/0x30 [mlx5_core]\n mlx5e_ethtool_set_channels+0xcb/0x200 [mlx5_core]\n ethnl_set_channels+0x28f/0x3b0\n ethnl_default_set_doit+0xec/0x240\n genl_family_rcv_msg_doit+0xd0/0x120\n genl_rcv_msg+0x188/0x2c0\n ? ethn\n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27014", "url": "https://www.suse.com/security/cve/CVE-2024-27014" }, { "category": "external", "summary": "SUSE Bug 1223735 for CVE-2024-27014", "url": "https://bugzilla.suse.com/1223735" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27014" }, { "cve": "CVE-2024-27030", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27030" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Use separate handlers for interrupts\n\nFor PF to AF interrupt vector and VF to AF vector same\ninterrupt handler is registered which is causing race condition.\nWhen two interrupts are raised to two CPUs at same time\nthen two cores serve same event corrupting the data.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27030", "url": "https://www.suse.com/security/cve/CVE-2024-27030" }, { "category": "external", "summary": "SUSE Bug 1223790 for CVE-2024-27030", "url": "https://bugzilla.suse.com/1223790" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27030" }, { "cve": "CVE-2024-27038", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27038" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: Fix clk_core_get NULL dereference\n\nIt is possible for clk_core_get to dereference a NULL in the following\nsequence:\n\nclk_core_get()\n of_clk_get_hw_from_clkspec()\n __of_clk_get_hw_from_provider()\n __clk_get_hw()\n\n__clk_get_hw() can return NULL which is dereferenced by clk_core_get() at\nhw-\u003ecore.\n\nPrior to commit dde4eff47c82 (\"clk: Look for parents with clkdev based\nclk_lookups\") the check IS_ERR_OR_NULL() was performed which would have\ncaught the NULL.\n\nReading the description of this function it talks about returning NULL but\nthat cannot be so at the moment.\n\nUpdate the function to check for hw before dereferencing it and return NULL\nif hw is NULL.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27038", "url": "https://www.suse.com/security/cve/CVE-2024-27038" }, { "category": "external", "summary": "SUSE Bug 1223816 for CVE-2024-27038", "url": "https://bugzilla.suse.com/1223816" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27038" }, { "cve": "CVE-2024-27039", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27039" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: hisilicon: hi3559a: Fix an erroneous devm_kfree()\n\n\u0027p_clk\u0027 is an array allocated just before the for loop for all clk that\nneed to be registered.\nIt is incremented at each loop iteration.\n\nIf a clk_register() call fails, \u0027p_clk\u0027 may point to something different\nfrom what should be freed.\n\nThe best we can do, is to avoid this wrong release of memory.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27039", "url": "https://www.suse.com/security/cve/CVE-2024-27039" }, { "category": "external", "summary": "SUSE Bug 1223821 for CVE-2024-27039", "url": "https://bugzilla.suse.com/1223821" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27039" }, { "cve": "CVE-2024-27041", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27041" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix NULL checks for adev-\u003edm.dc in amdgpu_dm_fini()\n\nSince \u0027adev-\u003edm.dc\u0027 in amdgpu_dm_fini() might turn out to be NULL\nbefore the call to dc_enable_dmub_notifications(), check\nbeforehand to ensure there will not be a possible NULL-ptr-deref\nthere.\n\nAlso, since commit 1e88eb1b2c25 (\"drm/amd/display: Drop\nCONFIG_DRM_AMD_DC_HDCP\") there are two separate checks for NULL in\n\u0027adev-\u003edm.dc\u0027 before dc_deinit_callbacks() and dc_dmub_srv_destroy().\nClean up by combining them all under one \u0027if\u0027.\n\nFound by Linux Verification Center (linuxtesting.org) with static\nanalysis tool SVACE.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27041", "url": "https://www.suse.com/security/cve/CVE-2024-27041" }, { "category": "external", "summary": "SUSE Bug 1223714 for CVE-2024-27041", "url": "https://bugzilla.suse.com/1223714" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27041" }, { "cve": "CVE-2024-27042", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27042" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix potential out-of-bounds access in \u0027amdgpu_discovery_reg_base_init()\u0027\n\nThe issue arises when the array \u0027adev-\u003evcn.vcn_config\u0027 is accessed\nbefore checking if the index \u0027adev-\u003evcn.num_vcn_inst\u0027 is within the\nbounds of the array.\n\nThe fix involves moving the bounds check before the array access. This\nensures that \u0027adev-\u003evcn.num_vcn_inst\u0027 is within the bounds of the array\nbefore it is used as an index.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c:1289 amdgpu_discovery_reg_base_init() error: testing array offset \u0027adev-\u003evcn.num_vcn_inst\u0027 after use.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27042", "url": "https://www.suse.com/security/cve/CVE-2024-27042" }, { "category": "external", "summary": "SUSE Bug 1223823 for CVE-2024-27042", "url": "https://bugzilla.suse.com/1223823" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27042" }, { "cve": "CVE-2024-27043", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27043" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: edia: dvbdev: fix a use-after-free\n\nIn dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed\nin several error-handling paths. However, *pdvbdev is not set to NULL\nafter dvbdev\u0027s deallocation, causing use-after-frees in many places,\nfor example, in the following call chain:\n\nbudget_register\n |-\u003e dvb_dmxdev_init\n |-\u003e dvb_register_device\n |-\u003e dvb_dmxdev_release\n |-\u003e dvb_unregister_device\n |-\u003e dvb_remove_device\n |-\u003e dvb_device_put\n |-\u003e kref_put\n\nWhen calling dvb_unregister_device, dmxdev-\u003edvbdev (i.e. *pdvbdev in\ndvb_register_device) could point to memory that had been freed in\ndvb_register_device. Thereafter, this pointer is transferred to\nkref_put and triggering a use-after-free.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27043", "url": "https://www.suse.com/security/cve/CVE-2024-27043" }, { "category": "external", "summary": "SUSE Bug 1218562 for CVE-2024-27043", "url": "https://bugzilla.suse.com/1218562" }, { "category": "external", "summary": "SUSE Bug 1223824 for CVE-2024-27043", "url": "https://bugzilla.suse.com/1223824" }, { "category": "external", "summary": "SUSE Bug 1223825 for CVE-2024-27043", "url": "https://bugzilla.suse.com/1223825" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "important" } ], "title": "CVE-2024-27043" }, { "cve": "CVE-2024-27046", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27046" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfp: flower: handle acti_netdevs allocation failure\n\nThe kmalloc_array() in nfp_fl_lag_do_work() will return null, if\nthe physical memory has run out. As a result, if we dereference\nthe acti_netdevs, the null pointer dereference bugs will happen.\n\nThis patch adds a check to judge whether allocation failure occurs.\nIf it happens, the delayed work will be rescheduled and try again.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27046", "url": "https://www.suse.com/security/cve/CVE-2024-27046" }, { "category": "external", "summary": "SUSE Bug 1223827 for CVE-2024-27046", "url": "https://bugzilla.suse.com/1223827" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27046" }, { "cve": "CVE-2024-27056", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27056" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: ensure offloading TID queue exists\n\nThe resume code path assumes that the TX queue for the offloading TID\nhas been configured. At resume time it then tries to sync the write\npointer as it may have been updated by the firmware.\n\nIn the unusual event that no packets have been send on TID 0, the queue\nwill not have been allocated and this causes a crash. Fix this by\nensuring the queue exist at suspend time.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27056", "url": "https://www.suse.com/security/cve/CVE-2024-27056" }, { "category": "external", "summary": "SUSE Bug 1223822 for CVE-2024-27056", "url": "https://bugzilla.suse.com/1223822" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27056" }, { "cve": "CVE-2024-27059", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27059" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: usb-storage: Prevent divide-by-0 error in isd200_ata_command\n\nThe isd200 sub-driver in usb-storage uses the HEADS and SECTORS values\nin the ATA ID information to calculate cylinder and head values when\ncreating a CDB for READ or WRITE commands. The calculation involves\ndivision and modulus operations, which will cause a crash if either of\nthese values is 0. While this never happens with a genuine device, it\ncould happen with a flawed or subversive emulation, as reported by the\nsyzbot fuzzer.\n\nProtect against this possibility by refusing to bind to the device if\neither the ATA_ID_HEADS or ATA_ID_SECTORS value in the device\u0027s ID\ninformation is 0. This requires isd200_Initialization() to return a\nnegative error code when initialization fails; currently it always\nreturns 0 (even when there is an error).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27059", "url": "https://www.suse.com/security/cve/CVE-2024-27059" }, { "category": "external", "summary": "SUSE Bug 1223738 for CVE-2024-27059", "url": "https://bugzilla.suse.com/1223738" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27059" }, { "cve": "CVE-2024-27062", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27062" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau: lock the client object tree.\n\nIt appears the client object tree has no locking unless I\u0027ve missed\nsomething else. Fix races around adding/removing client objects,\nmostly vram bar mappings.\n\n 4562.099306] general protection fault, probably for non-canonical address 0x6677ed422bceb80c: 0000 [#1] PREEMPT SMP PTI\n[ 4562.099314] CPU: 2 PID: 23171 Comm: deqp-vk Not tainted 6.8.0-rc6+ #27\n[ 4562.099324] Hardware name: Gigabyte Technology Co., Ltd. Z390 I AORUS PRO WIFI/Z390 I AORUS PRO WIFI-CF, BIOS F8 11/05/2021\n[ 4562.099330] RIP: 0010:nvkm_object_search+0x1d/0x70 [nouveau]\n[ 4562.099503] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 0f 1f 44 00 00 48 89 f8 48 85 f6 74 39 48 8b 87 a0 00 00 00 48 85 c0 74 12 \u003c48\u003e 8b 48 f8 48 39 ce 73 15 48 8b 40 10 48 85 c0 75 ee 48 c7 c0 fe\n[ 4562.099506] RSP: 0000:ffffa94cc420bbf8 EFLAGS: 00010206\n[ 4562.099512] RAX: 6677ed422bceb814 RBX: ffff98108791f400 RCX: ffff9810f26b8f58\n[ 4562.099517] RDX: 0000000000000000 RSI: ffff9810f26b9158 RDI: ffff98108791f400\n[ 4562.099519] RBP: ffff9810f26b9158 R08: 0000000000000000 R09: 0000000000000000\n[ 4562.099521] R10: ffffa94cc420bc48 R11: 0000000000000001 R12: ffff9810f02a7cc0\n[ 4562.099526] R13: 0000000000000000 R14: 00000000000000ff R15: 0000000000000007\n[ 4562.099528] FS: 00007f629c5017c0(0000) GS:ffff98142c700000(0000) knlGS:0000000000000000\n[ 4562.099534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4562.099536] CR2: 00007f629a882000 CR3: 000000017019e004 CR4: 00000000003706f0\n[ 4562.099541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4562.099542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 4562.099544] Call Trace:\n[ 4562.099555] \u003cTASK\u003e\n[ 4562.099573] ? die_addr+0x36/0x90\n[ 4562.099583] ? exc_general_protection+0x246/0x4a0\n[ 4562.099593] ? asm_exc_general_protection+0x26/0x30\n[ 4562.099600] ? nvkm_object_search+0x1d/0x70 [nouveau]\n[ 4562.099730] nvkm_ioctl+0xa1/0x250 [nouveau]\n[ 4562.099861] nvif_object_map_handle+0xc8/0x180 [nouveau]\n[ 4562.099986] nouveau_ttm_io_mem_reserve+0x122/0x270 [nouveau]\n[ 4562.100156] ? dma_resv_test_signaled+0x26/0xb0\n[ 4562.100163] ttm_bo_vm_fault_reserved+0x97/0x3c0 [ttm]\n[ 4562.100182] ? __mutex_unlock_slowpath+0x2a/0x270\n[ 4562.100189] nouveau_ttm_fault+0x69/0xb0 [nouveau]\n[ 4562.100356] __do_fault+0x32/0x150\n[ 4562.100362] do_fault+0x7c/0x560\n[ 4562.100369] __handle_mm_fault+0x800/0xc10\n[ 4562.100382] handle_mm_fault+0x17c/0x3e0\n[ 4562.100388] do_user_addr_fault+0x208/0x860\n[ 4562.100395] exc_page_fault+0x7f/0x200\n[ 4562.100402] asm_exc_page_fault+0x26/0x30\n[ 4562.100412] RIP: 0033:0x9b9870\n[ 4562.100419] Code: 85 a8 f7 ff ff 8b 8d 80 f7 ff ff 89 08 e9 18 f2 ff ff 0f 1f 84 00 00 00 00 00 44 89 32 e9 90 fa ff ff 0f 1f 84 00 00 00 00 00 \u003c44\u003e 89 32 e9 f8 f1 ff ff 0f 1f 84 00 00 00 00 00 66 44 89 32 e9 e7\n[ 4562.100422] RSP: 002b:00007fff9ba2dc70 EFLAGS: 00010246\n[ 4562.100426] RAX: 0000000000000004 RBX: 000000000dd65e10 RCX: 000000fff0000000\n[ 4562.100428] RDX: 00007f629a882000 RSI: 00007f629a882000 RDI: 0000000000000066\n[ 4562.100432] RBP: 00007fff9ba2e570 R08: 0000000000000000 R09: 0000000123ddf000\n[ 4562.100434] R10: 0000000000000001 R11: 0000000000000246 R12: 000000007fffffff\n[ 4562.100436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\n[ 4562.100446] \u003c/TASK\u003e\n[ 4562.100448] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables libcrc32c nfnetlink cmac bnep sunrpc iwlmvm intel_rapl_msr intel_rapl_common snd_sof_pci_intel_cnl x86_pkg_temp_thermal intel_powerclamp snd_sof_intel_hda_common mac80211 coretemp snd_soc_acpi_intel_match kvm_intel snd_soc_acpi snd_soc_hdac_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof_intel_hda_mlink \n---truncated---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27062", "url": "https://www.suse.com/security/cve/CVE-2024-27062" }, { "category": "external", "summary": "SUSE Bug 1223834 for CVE-2024-27062", "url": "https://bugzilla.suse.com/1223834" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27062" }, { "cve": "CVE-2024-27389", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27389" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore: inode: Only d_invalidate() is needed\n\nUnloading a modular pstore backend with records in pstorefs would\ntrigger the dput() double-drop warning:\n\n WARNING: CPU: 0 PID: 2569 at fs/dcache.c:762 dput.part.0+0x3f3/0x410\n\nUsing the combo of d_drop()/dput() (as mentioned in\nDocumentation/filesystems/vfs.rst) isn\u0027t the right approach here, and\nleads to the reference counting problem seen above. Use d_invalidate()\nand update the code to not bother checking for error codes that can\nnever happen.\n\n---", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27389", "url": "https://www.suse.com/security/cve/CVE-2024-27389" }, { "category": "external", "summary": "SUSE Bug 1223705 for CVE-2024-27389", "url": "https://bugzilla.suse.com/1223705" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.51.1.noarch", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.51.1.x86_64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.aarch64", "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.51.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-05-14T14:29:53Z", "details": "moderate" } ], "title": "CVE-2024-27389" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…