RHSA-2023:0334
Vulnerability from csaf_opensuse - Published: 2023-01-23 00:00 - Updated: 2026-09-20 11:26Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2023:0334.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2023:0334.
Patchnames: RHSA-2023:0334
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
important
8.4 (High)
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
important
4 (Medium)
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
moderate
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
important
8.8 (High)
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
22 products, the same list as for
CVE-2022-2959
Threats
Impact
moderate
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2023:0334.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2023:0334.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2023:0334",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_0334.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2959 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30594 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3077 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4139 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-43945 page",
"url": "https://www.suse.com/security/cve/CVE-2022-43945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50053 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50054 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50054/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:26:01Z",
"generator": {
"date": "2023-01-23T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2023:0334",
"initial_release_date": "2023-01-23T00:00:00Z",
"revision_history": [
{
"date": "2023-01-23T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:26:01Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-162.12.1.el9_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"product_id": "kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-162.12.1.el9_1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@5.14.0-162.12.1.el9_1?arch=x86_64\u0026upstream=bpftool-0:5.14.0-162.12.1.el9_1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-162.12.1.el9_1?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-162.12.1.el9_1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-162.12.1.el9_1?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-162.12.1.el9_1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-162.12.1.el9_1?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-162.12.1.el9_1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-162.12.1.el9_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "perf-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "perf-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-162.12.1.el9_1?arch=x86_64\u0026upstream=perf-0:5.14.0-162.12.1.el9_1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-162.12.1.el9_1.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-162.12.1.el9_1.x86_64",
"product_id": "python3-perf-0:5.14.0-162.12.1.el9_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-162.12.1.el9_1?arch=x86_64\u0026upstream=perf-0:5.14.0-162.12.1.el9_1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-162.12.1.el9_1.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "perf-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-162.12.1.el9_1.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-162.12.1.el9_1.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-2959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2959"
}
],
"notes": [
{
"category": "general",
"text": "A race condition was found in the Linux kernel\u0027s watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2959",
"url": "https://www.suse.com/security/cve/CVE-2022-2959"
},
{
"category": "external",
"summary": "SUSE Bug 1202681 for CVE-2022-2959",
"url": "https://bugzilla.suse.com/1202681"
},
{
"category": "external",
"summary": "SUSE Bug 1202685 for CVE-2022-2959",
"url": "https://bugzilla.suse.com/1202685"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2959"
},
{
"cve": "CVE-2022-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2964"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2964",
"url": "https://www.suse.com/security/cve/CVE-2022-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1202686 for CVE-2022-2964",
"url": "https://bugzilla.suse.com/1202686"
},
{
"category": "external",
"summary": "SUSE Bug 1203008 for CVE-2022-2964",
"url": "https://bugzilla.suse.com/1203008"
},
{
"category": "external",
"summary": "SUSE Bug 1208044 for CVE-2022-2964",
"url": "https://bugzilla.suse.com/1208044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2964"
},
{
"cve": "CVE-2022-30594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30594"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30594",
"url": "https://www.suse.com/security/cve/CVE-2022-30594"
},
{
"category": "external",
"summary": "SUSE Bug 1199505 for CVE-2022-30594",
"url": "https://bugzilla.suse.com/1199505"
},
{
"category": "external",
"summary": "SUSE Bug 1199602 for CVE-2022-30594",
"url": "https://bugzilla.suse.com/1199602"
},
{
"category": "external",
"summary": "SUSE Bug 1201549 for CVE-2022-30594",
"url": "https://bugzilla.suse.com/1201549"
},
{
"category": "external",
"summary": "SUSE Bug 1204132 for CVE-2022-30594",
"url": "https://bugzilla.suse.com/1204132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-30594"
},
{
"cve": "CVE-2022-3077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3077"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow vulnerability was found in the Linux kernel Intel\u0027s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_BLOCK_PROC_CALL case (via the ioctl I2C_SMBUS) with malicious input data. This flaw could allow a local user to crash the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3077",
"url": "https://www.suse.com/security/cve/CVE-2022-3077"
},
{
"category": "external",
"summary": "SUSE Bug 1203040 for CVE-2022-3077",
"url": "https://bugzilla.suse.com/1203040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-3077"
},
{
"cve": "CVE-2022-4139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4139"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect TLB flush issue was found in the Linux kernel\u0027s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4139",
"url": "https://www.suse.com/security/cve/CVE-2022-4139"
},
{
"category": "external",
"summary": "SUSE Bug 1205700 for CVE-2022-4139",
"url": "https://bugzilla.suse.com/1205700"
},
{
"category": "external",
"summary": "SUSE Bug 1205815 for CVE-2022-4139",
"url": "https://bugzilla.suse.com/1205815"
},
{
"category": "external",
"summary": "SUSE Bug 1209225 for CVE-2022-4139",
"url": "https://bugzilla.suse.com/1209225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4139"
},
{
"cve": "CVE-2022-43945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-43945"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-43945",
"url": "https://www.suse.com/security/cve/CVE-2022-43945"
},
{
"category": "external",
"summary": "SUSE Bug 1205128 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1205128"
},
{
"category": "external",
"summary": "SUSE Bug 1205130 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1205130"
},
{
"category": "external",
"summary": "SUSE Bug 1208030 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1208030"
},
{
"category": "external",
"summary": "SUSE Bug 1208085 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1208085"
},
{
"category": "external",
"summary": "SUSE Bug 1209225 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1209225"
},
{
"category": "external",
"summary": "SUSE Bug 1210124 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1210124"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-43945"
},
{
"cve": "CVE-2022-50053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50053"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix reset error handling\n\nDo not call iavf_close in iavf_reset_task error handling. Doing so can\nlead to double call of napi_disable, which can lead to deadlock there.\nRemoving VF would lead to iavf_remove task being stuck, because it\nrequires crit_lock, which is held by iavf_close.\nCall iavf_disable_vf if reset fail, so that driver will clean up\nremaining invalid resources.\nDuring rapid VF resets, HW can fail to setup VF mailbox. Wrong\nerror handling can lead to iavf_remove being stuck with:\n[ 5218.999087] iavf 0000:82:01.0: Failed to init adminq: -53\n...\n[ 5267.189211] INFO: task repro.sh:11219 blocked for more than 30 seconds.\n[ 5267.189520] Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 5267.189764] \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[ 5267.190062] task:repro.sh state:D stack: 0 pid:11219 ppid: 8162 flags:0x00000000\n[ 5267.190347] Call Trace:\n[ 5267.190647] \u003cTASK\u003e\n[ 5267.190927] __schedule+0x460/0x9f0\n[ 5267.191264] schedule+0x44/0xb0\n[ 5267.191563] schedule_preempt_disabled+0x14/0x20\n[ 5267.191890] __mutex_lock.isra.12+0x6e3/0xac0\n[ 5267.192237] ? iavf_remove+0xf9/0x6c0 [iavf]\n[ 5267.192565] iavf_remove+0x12a/0x6c0 [iavf]\n[ 5267.192911] ? _raw_spin_unlock_irqrestore+0x1e/0x40\n[ 5267.193285] pci_device_remove+0x36/0xb0\n[ 5267.193619] device_release_driver_internal+0xc1/0x150\n[ 5267.193974] pci_stop_bus_device+0x69/0x90\n[ 5267.194361] pci_stop_and_remove_bus_device+0xe/0x20\n[ 5267.194735] pci_iov_remove_virtfn+0xba/0x120\n[ 5267.195130] sriov_disable+0x2f/0xe0\n[ 5267.195506] ice_free_vfs+0x7d/0x2f0 [ice]\n[ 5267.196056] ? pci_get_device+0x4f/0x70\n[ 5267.196496] ice_sriov_configure+0x78/0x1a0 [ice]\n[ 5267.196995] sriov_numvfs_store+0xfe/0x140\n[ 5267.197466] kernfs_fop_write_iter+0x12e/0x1c0\n[ 5267.197918] new_sync_write+0x10c/0x190\n[ 5267.198404] vfs_write+0x24e/0x2d0\n[ 5267.198886] ksys_write+0x5c/0xd0\n[ 5267.199367] do_syscall_64+0x3a/0x80\n[ 5267.199827] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n[ 5267.200317] RIP: 0033:0x7f5b381205c8\n[ 5267.200814] RSP: 002b:00007fff8c7e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\n[ 5267.201981] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5b381205c8\n[ 5267.202620] RDX: 0000000000000002 RSI: 00005569420ee900 RDI: 0000000000000001\n[ 5267.203426] RBP: 00005569420ee900 R08: 000000000000000a R09: 00007f5b38180820\n[ 5267.204327] R10: 000000000000000a R11: 0000000000000246 R12: 00007f5b383c06e0\n[ 5267.205193] R13: 0000000000000002 R14: 00007f5b383bb880 R15: 0000000000000002\n[ 5267.206041] \u003c/TASK\u003e\n[ 5267.206970] Kernel panic - not syncing: hung_task: blocked tasks\n[ 5267.207809] CPU: 48 PID: 551 Comm: khungtaskd Kdump: loaded Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 5267.208726] Hardware name: Dell Inc. PowerEdge R730/0WCJNT, BIOS 2.11.0 11/02/2019\n[ 5267.209623] Call Trace:\n[ 5267.210569] \u003cTASK\u003e\n[ 5267.211480] dump_stack_lvl+0x33/0x42\n[ 5267.212472] panic+0x107/0x294\n[ 5267.213467] watchdog.cold.8+0xc/0xbb\n[ 5267.214413] ? proc_dohung_task_timeout_secs+0x30/0x30\n[ 5267.215511] kthread+0xf4/0x120\n[ 5267.216459] ? kthread_complete_and_exit+0x20/0x20\n[ 5267.217505] ret_from_fork+0x22/0x30\n[ 5267.218459] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50053",
"url": "https://www.suse.com/security/cve/CVE-2022-50053"
},
{
"category": "external",
"summary": "SUSE Bug 1245038 for CVE-2022-50053",
"url": "https://bugzilla.suse.com/1245038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50053"
},
{
"cve": "CVE-2022-50054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50054"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix NULL pointer dereference in iavf_get_link_ksettings\n\nFix possible NULL pointer dereference, due to freeing of adapter-\u003evf_res\nin iavf_init_get_resources. Previous commit introduced a regression,\nwhere receiving IAVF_ERR_ADMIN_QUEUE_NO_WORK from iavf_get_vf_config\nwould free adapter-\u003evf_res. However, netdev is still registered, so\nethtool_ops can be called. Calling iavf_get_link_ksettings with no vf_res,\nwill result with:\n[ 9385.242676] BUG: kernel NULL pointer dereference, address: 0000000000000008\n[ 9385.242683] #PF: supervisor read access in kernel mode\n[ 9385.242686] #PF: error_code(0x0000) - not-present page\n[ 9385.242690] PGD 0 P4D 0\n[ 9385.242696] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI\n[ 9385.242701] CPU: 6 PID: 3217 Comm: pmdalinux Kdump: loaded Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 9385.242708] Hardware name: Dell Inc. PowerEdge R730/0WCJNT, BIOS 2.11.0 11/02/2019\n[ 9385.242710] RIP: 0010:iavf_get_link_ksettings+0x29/0xd0 [iavf]\n[ 9385.242745] Code: 00 0f 1f 44 00 00 b8 01 ef ff ff 48 c7 46 30 00 00 00 00 48 c7 46 38 00 00 00 00 c6 46 0b 00 66 89 46 08 48 8b 87 68 0e 00 00 \u003cf6\u003e 40 08 80 75 50 8b 87 5c 0e 00 00 83 f8 08 74 7a 76 1d 83 f8 20\n[ 9385.242749] RSP: 0018:ffffc0560ec7fbd0 EFLAGS: 00010246\n[ 9385.242755] RAX: 0000000000000000 RBX: ffffc0560ec7fc08 RCX: 0000000000000000\n[ 9385.242759] RDX: ffffffffc0ad4550 RSI: ffffc0560ec7fc08 RDI: ffffa0fc66674000\n[ 9385.242762] RBP: 00007ffd1fb2bf50 R08: b6a2d54b892363ee R09: ffffa101dc14fb00\n[ 9385.242765] R10: 0000000000000000 R11: 0000000000000004 R12: ffffa0fc66674000\n[ 9385.242768] R13: 0000000000000000 R14: ffffa0fc66674000 R15: 00000000ffffffa1\n[ 9385.242771] FS: 00007f93711a2980(0000) GS:ffffa0fad72c0000(0000) knlGS:0000000000000000\n[ 9385.242775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 9385.242778] CR2: 0000000000000008 CR3: 0000000a8e61c003 CR4: 00000000003706e0\n[ 9385.242781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 9385.242784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 9385.242787] Call Trace:\n[ 9385.242791] \u003cTASK\u003e\n[ 9385.242793] ethtool_get_settings+0x71/0x1a0\n[ 9385.242814] __dev_ethtool+0x426/0x2f40\n[ 9385.242823] ? slab_post_alloc_hook+0x4f/0x280\n[ 9385.242836] ? kmem_cache_alloc_trace+0x15d/0x2f0\n[ 9385.242841] ? dev_ethtool+0x59/0x170\n[ 9385.242848] dev_ethtool+0xa7/0x170\n[ 9385.242856] dev_ioctl+0xc3/0x520\n[ 9385.242866] sock_do_ioctl+0xa0/0xe0\n[ 9385.242877] sock_ioctl+0x22f/0x320\n[ 9385.242885] __x64_sys_ioctl+0x84/0xc0\n[ 9385.242896] do_syscall_64+0x3a/0x80\n[ 9385.242904] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n[ 9385.242918] RIP: 0033:0x7f93702396db\n[ 9385.242923] Code: 73 01 c3 48 8b 0d ad 57 38 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d 57 38 00 f7 d8 64 89 01 48\n[ 9385.242927] RSP: 002b:00007ffd1fb2bf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n[ 9385.242932] RAX: ffffffffffffffda RBX: 000055671b1d2fe0 RCX: 00007f93702396db\n[ 9385.242935] RDX: 00007ffd1fb2bf20 RSI: 0000000000008946 RDI: 0000000000000007\n[ 9385.242937] RBP: 00007ffd1fb2bf20 R08: 0000000000000003 R09: 0030763066307330\n[ 9385.242940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1fb2bf80\n[ 9385.242942] R13: 0000000000000007 R14: 0000556719f6de90 R15: 00007ffd1fb2c1b0\n[ 9385.242948] \u003c/TASK\u003e\n[ 9385.242949] Modules linked in: iavf(E) xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nft_compat nf_nat_tftp nft_objref nf_conntrack_tftp bridge stp llc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables rfkill nfnetlink vfat fat irdma ib_uverbs ib_core intel_rapl_msr intel_rapl_common sb_edac x86_pkg_temp_thermal intel_powerclamp coretem\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50054",
"url": "https://www.suse.com/security/cve/CVE-2022-50054"
},
{
"category": "external",
"summary": "SUSE Bug 1245040 for CVE-2022-50054",
"url": "https://bugzilla.suse.com/1245040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-162.12.1.el9_1.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-162.12.1.el9_1.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-162.12.1.el9_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-01-23T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50054"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…