RHSA-2024:10274
Vulnerability from csaf_opensuse - Published: 2024-11-26 00:00 - Updated: 2026-09-20 11:35Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:10274.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:10274.
Patchnames: RHSA-2024:10274
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-41009
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-41009
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-41009
Threats
Impact
moderate
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:10274.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:10274.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:10274",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_10274.json"
},
{
"category": "self",
"summary": "URL for RHSA-2024:10274",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-November/000615.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2024:10274",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-November/000615.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41009 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42244 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46679 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50226 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50226/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:35:55Z",
"generator": {
"date": "2024-11-26T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:10274",
"initial_release_date": "2024-11-26T00:00:00Z",
"revision_history": [
{
"date": "2024-11-26T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:35:55Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-503.15.1.el9_5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"product_id": "kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-503.15.1.el9_5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"product": {
"name": "bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"product_id": "bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.4.0-503.15.1.el9_5?arch=x86_64\u0026upstream=bpftool-0:7.4.0-503.15.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-503.15.1.el9_5?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-503.15.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-503.15.1.el9_5?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-503.15.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-503.15.1.el9_5?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-503.15.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt-addons@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "perf-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "perf-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-503.15.1.el9_5?arch=x86_64\u0026upstream=perf-0:5.14.0-503.15.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-503.15.1.el9_5?arch=x86_64\u0026upstream=perf-0:5.14.0-503.15.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-503.15.1.el9_5.x86_64",
"product": {
"name": "rv-0:5.14.0-503.15.1.el9_5.x86_64",
"product_id": "rv-0:5.14.0-503.15.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-503.15.1.el9_5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.4.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64"
},
"product_reference": "bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-503.15.1.el9_5.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "perf-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-503.15.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
},
"product_reference": "rv-0:5.14.0-503.15.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-41009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41009"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix overrunning reservations in ringbuf\n\nThe BPF ring buffer internally is implemented as a power-of-2 sized circular\nbuffer, with two logical and ever-increasing counters: consumer_pos is the\nconsumer counter to show which logical position the consumer consumed the\ndata, and producer_pos which is the producer counter denoting the amount of\ndata reserved by all producers.\n\nEach time a record is reserved, the producer that \"owns\" the record will\nsuccessfully advance producer counter. In user space each time a record is\nread, the consumer of the data advanced the consumer counter once it finished\nprocessing. Both counters are stored in separate pages so that from user\nspace, the producer counter is read-only and the consumer counter is read-write.\n\nOne aspect that simplifies and thus speeds up the implementation of both\nproducers and consumers is how the data area is mapped twice contiguously\nback-to-back in the virtual memory, allowing to not take any special measures\nfor samples that have to wrap around at the end of the circular buffer data\narea, because the next page after the last data page would be first data page\nagain, and thus the sample will still appear completely contiguous in virtual\nmemory.\n\nEach record has a struct bpf_ringbuf_hdr { u32 len; u32 pg_off; } header for\nbook-keeping the length and offset, and is inaccessible to the BPF program.\nHelpers like bpf_ringbuf_reserve() return `(void *)hdr + BPF_RINGBUF_HDR_SZ`\nfor the BPF program to use. Bing-Jhong and Muhammad reported that it is however\npossible to make a second allocated memory chunk overlapping with the first\nchunk and as a result, the BPF program is now able to edit first chunk\u0027s\nheader.\n\nFor example, consider the creation of a BPF_MAP_TYPE_RINGBUF map with size\nof 0x4000. Next, the consumer_pos is modified to 0x3000 /before/ a call to\nbpf_ringbuf_reserve() is made. This will allocate a chunk A, which is in\n[0x0,0x3008], and the BPF program is able to edit [0x8,0x3008]. Now, lets\nallocate a chunk B with size 0x3000. This will succeed because consumer_pos\nwas edited ahead of time to pass the `new_prod_pos - cons_pos \u003e rb-\u003emask`\ncheck. Chunk B will be in range [0x3008,0x6010], and the BPF program is able\nto edit [0x3010,0x6010]. Due to the ring buffer memory layout mentioned\nearlier, the ranges [0x0,0x4000] and [0x4000,0x8000] point to the same data\npages. This means that chunk B at [0x4000,0x4008] is chunk A\u0027s header.\nbpf_ringbuf_submit() / bpf_ringbuf_discard() use the header\u0027s pg_off to then\nlocate the bpf_ringbuf itself via bpf_ringbuf_restore_from_rec(). Once chunk\nB modified chunk A\u0027s header, then bpf_ringbuf_commit() refers to the wrong\npage and could cause a crash.\n\nFix it by calculating the oldest pending_pos and check whether the range\nfrom the oldest outstanding record to the newest would span beyond the ring\nbuffer size. If that is the case, then reject the request. We\u0027ve tested with\nthe ring buffer benchmark in BPF selftests (./benchs/run_bench_ringbufs.sh)\nbefore/after the fix and while it seems a bit slower on some benchmarks, it\nis still not significantly enough to matter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41009",
"url": "https://www.suse.com/security/cve/CVE-2024-41009"
},
{
"category": "external",
"summary": "SUSE Bug 1228020 for CVE-2024-41009",
"url": "https://bugzilla.suse.com/1228020"
},
{
"category": "external",
"summary": "SUSE Bug 1245988 for CVE-2024-41009",
"url": "https://bugzilla.suse.com/1245988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-11-26T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-41009"
},
{
"cve": "CVE-2024-42244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42244"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mos7840: fix crash on resume\n\nSince commit c49cfa917025 (\"USB: serial: use generic method if no\nalternative is provided in usb serial layer\"), USB serial core calls the\ngeneric resume implementation when the driver has not provided one.\n\nThis can trigger a crash on resume with mos7840 since support for\nmultiple read URBs was added back in 2011. Specifically, both port read\nURBs are now submitted on resume for open ports, but the context pointer\nof the second URB is left set to the core rather than mos7840 port\nstructure.\n\nFix this by implementing dedicated suspend and resume functions for\nmos7840.\n\nTested with Delock 87414 USB 2.0 to 4x serial adapter.\n\n[ johan: analyse crash and rewrite commit message; set busy flag on\n resume; drop bulk-in check; drop unnecessary usb_kill_urb() ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42244",
"url": "https://www.suse.com/security/cve/CVE-2024-42244"
},
{
"category": "external",
"summary": "SUSE Bug 1228967 for CVE-2024-42244",
"url": "https://bugzilla.suse.com/1228967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-11-26T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42244"
},
{
"cve": "CVE-2024-46679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nethtool: check device is present when getting link settings\n\nA sysfs reader can race with a device reset or removal, attempting to\nread device state when the device is not actually present. eg:\n\n [exception RIP: qed_get_current_link+17]\n #8 [ffffb9e4f2907c48] qede_get_link_ksettings at ffffffffc07a994a [qede]\n #9 [ffffb9e4f2907cd8] __rh_call_get_link_ksettings at ffffffff992b01a3\n #10 [ffffb9e4f2907d38] __ethtool_get_link_ksettings at ffffffff992b04e4\n #11 [ffffb9e4f2907d90] duplex_show at ffffffff99260300\n #12 [ffffb9e4f2907e38] dev_attr_show at ffffffff9905a01c\n #13 [ffffb9e4f2907e50] sysfs_kf_seq_show at ffffffff98e0145b\n #14 [ffffb9e4f2907e68] seq_read at ffffffff98d902e3\n #15 [ffffb9e4f2907ec8] vfs_read at ffffffff98d657d1\n #16 [ffffb9e4f2907f00] ksys_read at ffffffff98d65c3f\n #17 [ffffb9e4f2907f38] do_syscall_64 at ffffffff98a052fb\n\n crash\u003e struct net_device.state ffff9a9d21336000\n state = 5,\n\nstate 5 is __LINK_STATE_START (0b1) and __LINK_STATE_NOCARRIER (0b100).\nThe device is not present, note lack of __LINK_STATE_PRESENT (0b10).\n\nThis is the same sort of panic as observed in commit 4224cfd7fb65\n(\"net-sysfs: add check for netdevice being present to speed_show\").\n\nThere are many other callers of __ethtool_get_link_ksettings() which\ndon\u0027t have a device presence check.\n\nMove this check into ethtool to protect all callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46679",
"url": "https://www.suse.com/security/cve/CVE-2024-46679"
},
{
"category": "external",
"summary": "SUSE Bug 1230556 for CVE-2024-46679",
"url": "https://bugzilla.suse.com/1230556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-11-26T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-46679"
},
{
"cve": "CVE-2024-50226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50226"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/port: Fix use-after-free, permit out-of-order decoder shutdown\n\nIn support of investigating an initialization failure report [1],\ncxl_test was updated to register mock memory-devices after the mock\nroot-port/bus device had been registered. That led to cxl_test crashing\nwith a use-after-free bug with the following signature:\n\n cxl_port_attach_region: cxl region3: cxl_host_bridge.0:port3 decoder3.0 add: mem0:decoder7.0 @ 0 next: cxl_switch_uport.0 nr_eps: 1 nr_targets: 1\n cxl_port_attach_region: cxl region3: cxl_host_bridge.0:port3 decoder3.0 add: mem4:decoder14.0 @ 1 next: cxl_switch_uport.0 nr_eps: 2 nr_targets: 1\n cxl_port_setup_targets: cxl region3: cxl_switch_uport.0:port6 target[0] = cxl_switch_dport.0 for mem0:decoder7.0 @ 0\n1) cxl_port_setup_targets: cxl region3: cxl_switch_uport.0:port6 target[1] = cxl_switch_dport.4 for mem4:decoder14.0 @ 1\n [..]\n cxld_unregister: cxl decoder14.0:\n cxl_region_decode_reset: cxl_region region3:\n mock_decoder_reset: cxl_port port3: decoder3.0 reset\n2) mock_decoder_reset: cxl_port port3: decoder3.0: out of order reset, expected decoder3.1\n cxl_endpoint_decoder_release: cxl decoder14.0:\n [..]\n cxld_unregister: cxl decoder7.0:\n3) cxl_region_decode_reset: cxl_region region3:\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6bc3: 0000 [#1] PREEMPT SMP PTI\n [..]\n RIP: 0010:to_cxl_port+0x8/0x60 [cxl_core]\n [..]\n Call Trace:\n \u003cTASK\u003e\n cxl_region_decode_reset+0x69/0x190 [cxl_core]\n cxl_region_detach+0xe8/0x210 [cxl_core]\n cxl_decoder_kill_region+0x27/0x40 [cxl_core]\n cxld_unregister+0x5d/0x60 [cxl_core]\n\nAt 1) a region has been established with 2 endpoint decoders (7.0 and\n14.0). Those endpoints share a common switch-decoder in the topology\n(3.0). At teardown, 2), decoder14.0 is the first to be removed and hits\nthe \"out of order reset case\" in the switch decoder. The effect though\nis that region3 cleanup is aborted leaving it in-tact and\nreferencing decoder14.0. At 3) the second attempt to teardown region3\ntrips over the stale decoder14.0 object which has long since been\ndeleted.\n\nThe fix here is to recognize that the CXL specification places no\nmandate on in-order shutdown of switch-decoders, the driver enforces\nin-order allocation, and hardware enforces in-order commit. So, rather\nthan fail and leave objects dangling, always remove them.\n\nIn support of making cxl_region_decode_reset() always succeed,\ncxl_region_invalidate_memregion() failures are turned into warnings.\nCrashing the kernel is ok there since system integrity is at risk if\ncaches cannot be managed around physical address mutation events like\nCXL region destruction.\n\nA new device_for_each_child_reverse_from() is added to cleanup\nport-\u003ecommit_end after all dependent decoders have been disabled. In\nother words if decoders are allocated 0-\u003e1-\u003e2 and disabled 1-\u003e2-\u003e0 then\nport-\u003ecommit_end only decrements from 2 after 2 has been disabled, and\nit decrements all the way to zero since 1 was disabled previously.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50226",
"url": "https://www.suse.com/security/cve/CVE-2024-50226"
},
{
"category": "external",
"summary": "SUSE Bug 1233195 for CVE-2024-50226",
"url": "https://bugzilla.suse.com/1233195"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.15.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.15.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.15.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-11-26T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-50226"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…