RHSA-2024:8617
Vulnerability from csaf_opensuse - Published: 2024-10-30 00:00 - Updated: 2026-09-20 11:43Summary
security update for kernel
Severity
Low
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:8617.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:8617.
Patchnames: RHSA-2024:8617
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
important
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
low
6.6 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47383
Threats
Impact
moderate
References
76 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:8617.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:8617.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:8617",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_8617.json"
},
{
"category": "self",
"summary": "URL for RHSA-2024:8617",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-October/000161.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2024:8617",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-October/000161.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47383 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-54153 page",
"url": "https://www.suse.com/security/cve/CVE-2023-54153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2201 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26640 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26826 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26923 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26961 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36244 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39472 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39504 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40960 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40972 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40977 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40995 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41005 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41013 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41014 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45018/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:43:43Z",
"generator": {
"date": "2024-10-30T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:8617",
"initial_release_date": "2024-10-30T00:00:00Z",
"revision_history": [
{
"date": "2024-10-30T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:43:43Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-427.42.1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"product_id": "kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-427.42.1.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"product": {
"name": "bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"product_id": "bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.3.0-427.42.1.el9_4?arch=x86_64\u0026upstream=bpftool-0:7.3.0-427.42.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-427.42.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.42.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-427.42.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.42.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-427.42.1.el9_4?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-427.42.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "perf-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "perf-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-427.42.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.42.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-427.42.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.42.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-427.42.1.el9_4.x86_64",
"product": {
"name": "rv-0:5.14.0-427.42.1.el9_4.x86_64",
"product_id": "rv-0:5.14.0-427.42.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-427.42.1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.3.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64"
},
"product_reference": "bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-427.42.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "perf-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-427.42.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
},
"product_reference": "rv-0:5.14.0-427.42.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-47383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47383"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: Fix out-of-bound vmalloc access in imageblit\n\nThis issue happens when a userspace program does an ioctl\nFBIOPUT_VSCREENINFO passing the fb_var_screeninfo struct\ncontaining only the fields xres, yres, and bits_per_pixel\nwith values.\n\nIf this struct is the same as the previous ioctl, the\nvc_resize() detects it and doesn\u0027t call the resize_screen(),\nleaving the fb_var_screeninfo incomplete. And this leads to\nthe updatescrollmode() calculates a wrong value to\nfbcon_display-\u003evrows, which makes the real_y() return a\nwrong value of y, and that value, eventually, causes\nthe imageblit to access an out-of-bound address value.\n\nTo solve this issue I made the resize_screen() be called\neven if the screen does not need any resizing, so it will\n\"fix and fill\" the fb_var_screeninfo independently.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47383",
"url": "https://www.suse.com/security/cve/CVE-2021-47383"
},
{
"category": "external",
"summary": "SUSE Bug 1225208 for CVE-2021-47383",
"url": "https://bugzilla.suse.com/1225208"
},
{
"category": "external",
"summary": "SUSE Bug 1225211 for CVE-2021-47383",
"url": "https://bugzilla.suse.com/1225211"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-47383"
},
{
"cve": "CVE-2023-54153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-54153"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: turn quotas off if mount failed after enabling quotas\n\nYi found during a review of the patch \"ext4: don\u0027t BUG on inconsistent\njournal feature\" that when ext4_mark_recovery_complete() returns an error\nvalue, the error handling path does not turn off the enabled quotas,\nwhich triggers the following kmemleak:\n\n================================================================\nunreferenced object 0xffff8cf68678e7c0 (size 64):\ncomm \"mount\", pid 746, jiffies 4294871231 (age 11.540s)\nhex dump (first 32 bytes):\n00 90 ef 82 f6 8c ff ff 00 00 00 00 41 01 00 00 ............A...\nc7 00 00 00 bd 00 00 00 0a 00 00 00 48 00 00 00 ............H...\nbacktrace:\n[\u003c00000000c561ef24\u003e] __kmem_cache_alloc_node+0x4d4/0x880\n[\u003c00000000d4e621d7\u003e] kmalloc_trace+0x39/0x140\n[\u003c00000000837eee74\u003e] v2_read_file_info+0x18a/0x3a0\n[\u003c0000000088f6c877\u003e] dquot_load_quota_sb+0x2ed/0x770\n[\u003c00000000340a4782\u003e] dquot_load_quota_inode+0xc6/0x1c0\n[\u003c0000000089a18bd5\u003e] ext4_enable_quotas+0x17e/0x3a0 [ext4]\n[\u003c000000003a0268fa\u003e] __ext4_fill_super+0x3448/0x3910 [ext4]\n[\u003c00000000b0f2a8a8\u003e] ext4_fill_super+0x13d/0x340 [ext4]\n[\u003c000000004a9489c4\u003e] get_tree_bdev+0x1dc/0x370\n[\u003c000000006e723bf1\u003e] ext4_get_tree+0x1d/0x30 [ext4]\n[\u003c00000000c7cb663d\u003e] vfs_get_tree+0x31/0x160\n[\u003c00000000320e1bed\u003e] do_new_mount+0x1d5/0x480\n[\u003c00000000c074654c\u003e] path_mount+0x22e/0xbe0\n[\u003c0000000003e97a8e\u003e] do_mount+0x95/0xc0\n[\u003c000000002f3d3736\u003e] __x64_sys_mount+0xc4/0x160\n[\u003c0000000027d2140c\u003e] do_syscall_64+0x3f/0x90\n================================================================\n\nTo solve this problem, we add a \"failed_mount10\" tag, and call\next4_quota_off_umount() in this tag to release the enabled qoutas.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-54153",
"url": "https://www.suse.com/security/cve/CVE-2023-54153"
},
{
"category": "external",
"summary": "SUSE Bug 1256081 for CVE-2023-54153",
"url": "https://bugzilla.suse.com/1256081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-54153"
},
{
"cve": "CVE-2024-2201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2201"
}
],
"notes": [
{
"category": "general",
"text": "A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2201",
"url": "https://www.suse.com/security/cve/CVE-2024-2201"
},
{
"category": "external",
"summary": "SUSE Bug 1212111 for CVE-2024-2201",
"url": "https://bugzilla.suse.com/1212111"
},
{
"category": "external",
"summary": "SUSE Bug 1217339 for CVE-2024-2201",
"url": "https://bugzilla.suse.com/1217339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-2201"
},
{
"cve": "CVE-2024-26640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26640"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: add sanity checks to rx zerocopy\n\nTCP rx zerocopy intent is to map pages initially allocated\nfrom NIC drivers, not pages owned by a fs.\n\nThis patch adds to can_map_frag() these additional checks:\n\n- Page must not be a compound one.\n- page-\u003emapping must be NULL.\n\nThis fixes the panic reported by ZhangPeng.\n\nsyzbot was able to loopback packets built with sendfile(),\nmapping pages owned by an ext4 file to TCP rx zerocopy.\n\nr3 = socket$inet_tcp(0x2, 0x1, 0x0)\nmmap(\u0026(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)\nr4 = socket$inet_tcp(0x2, 0x1, 0x0)\nbind$inet(r4, \u0026(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10)\nconnect$inet(r4, \u0026(0x7f00000006c0)={0x2, 0x4e24, @empty}, 0x10)\nr5 = openat$dir(0xffffffffffffff9c, \u0026(0x7f00000000c0)=\u0027./file0\\x00\u0027,\n 0x181e42, 0x0)\nfallocate(r5, 0x0, 0x0, 0x85b8)\nsendfile(r4, r5, 0x0, 0x8ba0)\ngetsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23,\n \u0026(0x7f00000001c0)={\u0026(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0,\n 0x0, 0x0, 0x0, 0x0}, \u0026(0x7f0000000440)=0x40)\nr6 = openat$dir(0xffffffffffffff9c, \u0026(0x7f00000000c0)=\u0027./file0\\x00\u0027,\n 0x181e42, 0x0)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26640",
"url": "https://www.suse.com/security/cve/CVE-2024-26640"
},
{
"category": "external",
"summary": "SUSE Bug 1221650 for CVE-2024-26640",
"url": "https://bugzilla.suse.com/1221650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26640"
},
{
"cve": "CVE-2024-26826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26826"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix data re-injection from stale subflow\n\nWhen the MPTCP PM detects that a subflow is stale, all the packet\nscheduler must re-inject all the mptcp-level unacked data. To avoid\nacquiring unneeded locks, it first try to check if any unacked data\nis present at all in the RTX queue, but such check is currently\nbroken, as it uses TCP-specific helper on an MPTCP socket.\n\nFunnily enough fuzzers and static checkers are happy, as the accessed\nmemory still belongs to the mptcp_sock struct, and even from a\nfunctional perspective the recovery completed successfully, as\nthe short-cut test always failed.\n\nA recent unrelated TCP change - commit d5fed5addb2b (\"tcp: reorganize\ntcp_sock fast path variables\") - exposed the issue, as the tcp field\nreorganization makes the mptcp code always skip the re-inection.\n\nFix the issue dropping the bogus call: we are on a slow path, the early\noptimization proved once again to be evil.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26826",
"url": "https://www.suse.com/security/cve/CVE-2024-26826"
},
{
"category": "external",
"summary": "SUSE Bug 1223010 for CVE-2024-26826",
"url": "https://bugzilla.suse.com/1223010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26826"
},
{
"cve": "CVE-2024-26923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix garbage collector racing against connect()\n\nGarbage collector does not take into account the risk of embryo getting\nenqueued during the garbage collection. If such embryo has a peer that\ncarries SCM_RIGHTS, two consecutive passes of scan_children() may see a\ndifferent set of children. Leading to an incorrectly elevated inflight\ncount, and then a dangling pointer within the gc_inflight_list.\n\nsockets are AF_UNIX/SOCK_STREAM\nS is an unconnected socket\nL is a listening in-flight socket bound to addr, not in fdtable\nV\u0027s fd will be passed via sendmsg(), gets inflight count bumped\n\nconnect(S, addr)\tsendmsg(S, [V]); close(V)\t__unix_gc()\n----------------\t-------------------------\t-----------\n\nNS = unix_create1()\nskb1 = sock_wmalloc(NS)\nL = unix_find_other(addr)\nunix_state_lock(L)\nunix_peer(S) = NS\n\t\t\t// V count=1 inflight=0\n\n \t\t\tNS = unix_peer(S)\n \t\t\tskb2 = sock_alloc()\n\t\t\tskb_queue_tail(NS, skb2[V])\n\n\t\t\t// V became in-flight\n\t\t\t// V count=2 inflight=1\n\n\t\t\tclose(V)\n\n\t\t\t// V count=1 inflight=1\n\t\t\t// GC candidate condition met\n\n\t\t\t\t\t\tfor u in gc_inflight_list:\n\t\t\t\t\t\t if (total_refs == inflight_refs)\n\t\t\t\t\t\t add u to gc_candidates\n\n\t\t\t\t\t\t// gc_candidates={L, V}\n\n\t\t\t\t\t\tfor u in gc_candidates:\n\t\t\t\t\t\t scan_children(u, dec_inflight)\n\n\t\t\t\t\t\t// embryo (skb1) was not\n\t\t\t\t\t\t// reachable from L yet, so V\u0027s\n\t\t\t\t\t\t// inflight remains unchanged\n__skb_queue_tail(L, skb1)\nunix_state_unlock(L)\n\t\t\t\t\t\tfor u in gc_candidates:\n\t\t\t\t\t\t if (u.inflight)\n\t\t\t\t\t\t scan_children(u, inc_inflight_move_tail)\n\n\t\t\t\t\t\t// V count=1 inflight=2 (!)\n\nIf there is a GC-candidate listening socket, lock/unlock its state. This\nmakes GC wait until the end of any ongoing connect() to that socket. After\nflipping the lock, a possibly SCM-laden embryo is already enqueued. And if\nthere is another embryo coming, it can not possibly carry SCM_RIGHTS. At\nthis point, unix_inflight() can not happen because unix_gc_lock is already\ntaken. Inflight graph remains unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26923",
"url": "https://www.suse.com/security/cve/CVE-2024-26923"
},
{
"category": "external",
"summary": "SUSE Bug 1223384 for CVE-2024-26923",
"url": "https://bugzilla.suse.com/1223384"
},
{
"category": "external",
"summary": "SUSE Bug 1223683 for CVE-2024-26923",
"url": "https://bugzilla.suse.com/1223683"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26923"
},
{
"cve": "CVE-2024-26935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Fix unremoved procfs host directory regression\n\nCommit fc663711b944 (\"scsi: core: Remove the /proc/scsi/${proc_name}\ndirectory earlier\") fixed a bug related to modules loading/unloading, by\nadding a call to scsi_proc_hostdir_rm() on scsi_remove_host(). But that led\nto a potential duplicate call to the hostdir_rm() routine, since it\u0027s also\ncalled from scsi_host_dev_release(). That triggered a regression report,\nwhich was then fixed by commit be03df3d4bfe (\"scsi: core: Fix a procfs host\ndirectory removal regression\"). The fix just dropped the hostdir_rm() call\nfrom dev_release().\n\nBut it happens that this proc directory is created on scsi_host_alloc(),\nand that function \"pairs\" with scsi_host_dev_release(), while\nscsi_remove_host() pairs with scsi_add_host(). In other words, it seems the\nreason for removing the proc directory on dev_release() was meant to cover\ncases in which a SCSI host structure was allocated, but the call to\nscsi_add_host() didn\u0027t happen. And that pattern happens to exist in some\nerror paths, for example.\n\nSyzkaller causes that by using USB raw gadget device, error\u0027ing on\nusb-storage driver, at usb_stor_probe2(). By checking that path, we can see\nthat the BadDevice label leads to a scsi_host_put() after a SCSI host\nallocation, but there\u0027s no call to scsi_add_host() in such path. That leads\nto messages like this in dmesg (and a leak of the SCSI host proc\nstructure):\n\nusb-storage 4-1:87.51: USB Mass Storage device detected\nproc_dir_entry \u0027scsi/usb-storage\u0027 already registered\nWARNING: CPU: 1 PID: 3519 at fs/proc/generic.c:377 proc_register+0x347/0x4e0 fs/proc/generic.c:376\n\nThe proper fix seems to still call scsi_proc_hostdir_rm() on dev_release(),\nbut guard that with the state check for SHOST_CREATED; there is even a\ncomment in scsi_host_dev_release() detailing that: such conditional is\nmeant for cases where the SCSI host was allocated but there was no calls to\n{add,remove}_host(), like the usb-storage case.\n\nThis is what we propose here and with that, the error path of usb-storage\ndoes not trigger the warning anymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26935",
"url": "https://www.suse.com/security/cve/CVE-2024-26935"
},
{
"category": "external",
"summary": "SUSE Bug 1223675 for CVE-2024-26935",
"url": "https://bugzilla.suse.com/1223675"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26935"
},
{
"cve": "CVE-2024-26961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26961"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: fix llsec key resources release in mac802154_llsec_key_del\n\nmac802154_llsec_key_del() can free resources of a key directly without\nfollowing the RCU rules for waiting before the end of a grace period. This\nmay lead to use-after-free in case llsec_lookup_key() is traversing the\nlist of keys in parallel with a key deletion:\n\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 4 PID: 16000 at lib/refcount.c:25 refcount_warn_saturate+0x162/0x2a0\nModules linked in:\nCPU: 4 PID: 16000 Comm: wpan-ping Not tainted 6.7.0 #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014\nRIP: 0010:refcount_warn_saturate+0x162/0x2a0\nCall Trace:\n \u003cTASK\u003e\n llsec_lookup_key.isra.0+0x890/0x9e0\n mac802154_llsec_encrypt+0x30c/0x9c0\n ieee802154_subif_start_xmit+0x24/0x1e0\n dev_hard_start_xmit+0x13e/0x690\n sch_direct_xmit+0x2ae/0xbc0\n __dev_queue_xmit+0x11dd/0x3c20\n dgram_sendmsg+0x90b/0xd60\n __sys_sendto+0x466/0x4c0\n __x64_sys_sendto+0xe0/0x1c0\n do_syscall_64+0x45/0xf0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nAlso, ieee802154_llsec_key_entry structures are not freed by\nmac802154_llsec_key_del():\n\nunreferenced object 0xffff8880613b6980 (size 64):\n comm \"iwpan\", pid 2176, jiffies 4294761134 (age 60.475s)\n hex dump (first 32 bytes):\n 78 0d 8f 18 80 88 ff ff 22 01 00 00 00 00 ad de x.......\".......\n 00 00 00 00 00 00 00 00 03 00 cd ab 00 00 00 00 ................\n backtrace:\n [\u003cffffffff81dcfa62\u003e] __kmem_cache_alloc_node+0x1e2/0x2d0\n [\u003cffffffff81c43865\u003e] kmalloc_trace+0x25/0xc0\n [\u003cffffffff88968b09\u003e] mac802154_llsec_key_add+0xac9/0xcf0\n [\u003cffffffff8896e41a\u003e] ieee802154_add_llsec_key+0x5a/0x80\n [\u003cffffffff8892adc6\u003e] nl802154_add_llsec_key+0x426/0x5b0\n [\u003cffffffff86ff293e\u003e] genl_family_rcv_msg_doit+0x1fe/0x2f0\n [\u003cffffffff86ff46d1\u003e] genl_rcv_msg+0x531/0x7d0\n [\u003cffffffff86fee7a9\u003e] netlink_rcv_skb+0x169/0x440\n [\u003cffffffff86ff1d88\u003e] genl_rcv+0x28/0x40\n [\u003cffffffff86fec15c\u003e] netlink_unicast+0x53c/0x820\n [\u003cffffffff86fecd8b\u003e] netlink_sendmsg+0x93b/0xe60\n [\u003cffffffff86b91b35\u003e] ____sys_sendmsg+0xac5/0xca0\n [\u003cffffffff86b9c3dd\u003e] ___sys_sendmsg+0x11d/0x1c0\n [\u003cffffffff86b9c65a\u003e] __sys_sendmsg+0xfa/0x1d0\n [\u003cffffffff88eadbf5\u003e] do_syscall_64+0x45/0xf0\n [\u003cffffffff890000ea\u003e] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nHandle the proper resource release in the RCU callback function\nmac802154_llsec_key_del_rcu().\n\nNote that if llsec_lookup_key() finds a key, it gets a refcount via\nllsec_key_get() and locally copies key id from key_entry (which is a\nlist element). So it\u0027s safe to call llsec_key_put() and free the list\nentry after the RCU grace period elapses.\n\nFound by Linux Verification Center (linuxtesting.org).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26961",
"url": "https://www.suse.com/security/cve/CVE-2024-26961"
},
{
"category": "external",
"summary": "SUSE Bug 1223652 for CVE-2024-26961",
"url": "https://bugzilla.suse.com/1223652"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26961"
},
{
"cve": "CVE-2024-36244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36244"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: taprio: extend minimum interval restriction to entire cycle too\n\nIt is possible for syzbot to side-step the restriction imposed by the\nblamed commit in the Fixes: tag, because the taprio UAPI permits a\ncycle-time different from (and potentially shorter than) the sum of\nentry intervals.\n\nWe need one more restriction, which is that the cycle time itself must\nbe larger than N * ETH_ZLEN bit times, where N is the number of schedule\nentries. This restriction needs to apply regardless of whether the cycle\ntime came from the user or was the implicit, auto-calculated value, so\nwe move the existing \"cycle == 0\" check outside the \"if \"(!new-\u003ecycle_time)\"\nbranch. This way covers both conditions and scenarios.\n\nAdd a selftest which illustrates the issue triggered by syzbot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36244",
"url": "https://www.suse.com/security/cve/CVE-2024-36244"
},
{
"category": "external",
"summary": "SUSE Bug 1226797 for CVE-2024-36244",
"url": "https://bugzilla.suse.com/1226797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2024-36244"
},
{
"cve": "CVE-2024-39472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39472"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix log recovery buffer allocation for the legacy h_size fixup\n\nCommit a70f9fe52daa (\"xfs: detect and handle invalid iclog size set by\nmkfs\") added a fixup for incorrect h_size values used for the initial\numount record in old xfsprogs versions. Later commit 0c771b99d6c9\n(\"xfs: clean up calculation of LR header blocks\") cleaned up the log\nreover buffer calculation, but stoped using the fixed up h_size value\nto size the log recovery buffer, which can lead to an out of bounds\naccess when the incorrect h_size does not come from the old mkfs\ntool, but a fuzzer.\n\nFix this by open coding xlog_logrec_hblks and taking the fixed h_size\ninto account for this calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39472",
"url": "https://www.suse.com/security/cve/CVE-2024-39472"
},
{
"category": "external",
"summary": "SUSE Bug 1227432 for CVE-2024-39472",
"url": "https://bugzilla.suse.com/1227432"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-39472"
},
{
"cve": "CVE-2024-39504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_inner: validate mandatory meta and payload\n\nCheck for mandatory netlink attributes in payload and meta expression\nwhen used embedded from the inner expression, otherwise NULL pointer\ndereference is possible from userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39504",
"url": "https://www.suse.com/security/cve/CVE-2024-39504"
},
{
"category": "external",
"summary": "SUSE Bug 1227757 for CVE-2024-39504",
"url": "https://bugzilla.suse.com/1227757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-39504"
},
{
"cve": "CVE-2024-40904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages\n\nThe syzbot fuzzer found that the interrupt-URB completion callback in\nthe cdc-wdm driver was taking too long, and the driver\u0027s immediate\nresubmission of interrupt URBs with -EPROTO status combined with the\ndummy-hcd emulation to cause a CPU lockup:\n\ncdc_wdm 1-1:1.0: nonzero urb status received: -71\ncdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes\nwatchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor782:6625]\nCPU#0 Utilization every 4s during lockup:\n\t#1: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#2: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#3: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#4: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#5: 98% system,\t 1% softirq,\t 3% hardirq,\t 0% idle\nModules linked in:\nirq event stamp: 73096\nhardirqs last enabled at (73095): [\u003cffff80008037bc00\u003e] console_emit_next_record kernel/printk/printk.c:2935 [inline]\nhardirqs last enabled at (73095): [\u003cffff80008037bc00\u003e] console_flush_all+0x650/0xb74 kernel/printk/printk.c:2994\nhardirqs last disabled at (73096): [\u003cffff80008af10b00\u003e] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline]\nhardirqs last disabled at (73096): [\u003cffff80008af10b00\u003e] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551\nsoftirqs last enabled at (73048): [\u003cffff8000801ea530\u003e] softirq_handle_end kernel/softirq.c:400 [inline]\nsoftirqs last enabled at (73048): [\u003cffff8000801ea530\u003e] handle_softirqs+0xa60/0xc34 kernel/softirq.c:582\nsoftirqs last disabled at (73043): [\u003cffff800080020de8\u003e] __do_softirq+0x14/0x20 kernel/softirq.c:588\nCPU: 0 PID: 6625 Comm: syz-executor782 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\n\nTesting showed that the problem did not occur if the two error\nmessages -- the first two lines above -- were removed; apparently adding\nmaterial to the kernel log takes a surprisingly large amount of time.\n\nIn any case, the best approach for preventing these lockups and to\navoid spamming the log with thousands of error messages per second is\nto ratelimit the two dev_err() calls. Therefore we replace them with\ndev_err_ratelimited().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40904",
"url": "https://www.suse.com/security/cve/CVE-2024-40904"
},
{
"category": "external",
"summary": "SUSE Bug 1227772 for CVE-2024-40904",
"url": "https://bugzilla.suse.com/1227772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40904"
},
{
"cve": "CVE-2024-40931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: ensure snd_una is properly initialized on connect\n\nThis is strictly related to commit fb7a0d334894 (\"mptcp: ensure snd_nxt\nis properly initialized on connect\"). It turns out that syzkaller can\ntrigger the retransmit after fallback and before processing any other\nincoming packet - so that snd_una is still left uninitialized.\n\nAddress the issue explicitly initializing snd_una together with snd_nxt\nand write_seq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40931",
"url": "https://www.suse.com/security/cve/CVE-2024-40931"
},
{
"category": "external",
"summary": "SUSE Bug 1227780 for CVE-2024-40931",
"url": "https://bugzilla.suse.com/1227780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40931"
},
{
"cve": "CVE-2024-40960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40960"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: prevent possible NULL dereference in rt6_probe()\n\nsyzbot caught a NULL dereference in rt6_probe() [1]\n\nBail out if __in6_dev_get() returns NULL.\n\n[1]\nOops: general protection fault, probably for non-canonical address 0xdffffc00000000cb: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000658-0x000000000000065f]\nCPU: 1 PID: 22444 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\n RIP: 0010:rt6_probe net/ipv6/route.c:656 [inline]\n RIP: 0010:find_match+0x8c4/0xf50 net/ipv6/route.c:758\nCode: 14 fd f7 48 8b 85 38 ff ff ff 48 c7 45 b0 00 00 00 00 48 8d b8 5c 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 \u003c0f\u003e b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 19\nRSP: 0018:ffffc900034af070 EFLAGS: 00010203\nRAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004521000\nRDX: 00000000000000cb RSI: ffffffff8990d0cd RDI: 000000000000065c\nRBP: ffffc900034af150 R08: 0000000000000005 R09: 0000000000000000\nR10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a\nR13: 1ffff92000695e18 R14: ffff8880244a1d20 R15: 0000000000000000\nFS: 00007f4844a5a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b31b27000 CR3: 000000002d42c000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n rt6_nh_find_match+0xfa/0x1a0 net/ipv6/route.c:784\n nexthop_for_each_fib6_nh+0x26d/0x4a0 net/ipv4/nexthop.c:1496\n __find_rr_leaf+0x6e7/0xe00 net/ipv6/route.c:825\n find_rr_leaf net/ipv6/route.c:853 [inline]\n rt6_select net/ipv6/route.c:897 [inline]\n fib6_table_lookup+0x57e/0xa30 net/ipv6/route.c:2195\n ip6_pol_route+0x1cd/0x1150 net/ipv6/route.c:2231\n pol_lookup_func include/net/ip6_fib.h:616 [inline]\n fib6_rule_lookup+0x386/0x720 net/ipv6/fib6_rules.c:121\n ip6_route_output_flags_noref net/ipv6/route.c:2639 [inline]\n ip6_route_output_flags+0x1d0/0x640 net/ipv6/route.c:2651\n ip6_dst_lookup_tail.constprop.0+0x961/0x1760 net/ipv6/ip6_output.c:1147\n ip6_dst_lookup_flow+0x99/0x1d0 net/ipv6/ip6_output.c:1250\n rawv6_sendmsg+0xdab/0x4340 net/ipv6/raw.c:898\n inet_sendmsg+0x119/0x140 net/ipv4/af_inet.c:853\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n sock_write_iter+0x4b8/0x5c0 net/socket.c:1160\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0x6b6/0x1140 fs/read_write.c:590\n ksys_write+0x1f8/0x260 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40960",
"url": "https://www.suse.com/security/cve/CVE-2024-40960"
},
{
"category": "external",
"summary": "SUSE Bug 1227813 for CVE-2024-40960",
"url": "https://bugzilla.suse.com/1227813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40960"
},
{
"cve": "CVE-2024-40972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40972"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: do not create EA inode under buffer lock\n\next4_xattr_set_entry() creates new EA inodes while holding buffer lock\non the external xattr block. This is problematic as it nests all the\nallocation locking (which acquires locks on other buffers) under the\nbuffer lock. This can even deadlock when the filesystem is corrupted and\ne.g. quota file is setup to contain xattr block as data block. Move the\nallocation of EA inode out of ext4_xattr_set_entry() into the callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40972",
"url": "https://www.suse.com/security/cve/CVE-2024-40972"
},
{
"category": "external",
"summary": "SUSE Bug 1227910 for CVE-2024-40972",
"url": "https://bugzilla.suse.com/1227910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40972"
},
{
"cve": "CVE-2024-40977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40977"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921s: fix potential hung tasks during chip recovery\n\nDuring chip recovery (e.g. chip reset), there is a possible situation that\nkernel worker reset_work is holding the lock and waiting for kernel thread\nstat_worker to be parked, while stat_worker is waiting for the release of\nthe same lock.\nIt causes a deadlock resulting in the dumping of hung tasks messages and\npossible rebooting of the device.\n\nThis patch prevents the execution of stat_worker during the chip recovery.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40977",
"url": "https://www.suse.com/security/cve/CVE-2024-40977"
},
{
"category": "external",
"summary": "SUSE Bug 1227950 for CVE-2024-40977",
"url": "https://bugzilla.suse.com/1227950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40977"
},
{
"cve": "CVE-2024-40995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40995"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()\n\nsyzbot found hanging tasks waiting on rtnl_lock [1]\n\nA reproducer is available in the syzbot bug.\n\nWhen a request to add multiple actions with the same index is sent, the\nsecond request will block forever on the first request. This holds\nrtnl_lock, and causes tasks to hang.\n\nReturn -EAGAIN to prevent infinite looping, while keeping documented\nbehavior.\n\n[1]\n\nINFO: task kworker/1:0:5088 blocked for more than 143 seconds.\nNot tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0\n\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\ntask:kworker/1:0 state:D stack:23744 pid:5088 tgid:5088 ppid:2 flags:0x00004000\nWorkqueue: events_power_efficient reg_check_chans_work\nCall Trace:\n\u003cTASK\u003e\ncontext_switch kernel/sched/core.c:5409 [inline]\n__schedule+0xf15/0x5d00 kernel/sched/core.c:6746\n__schedule_loop kernel/sched/core.c:6823 [inline]\nschedule+0xe7/0x350 kernel/sched/core.c:6838\nschedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895\n__mutex_lock_common kernel/locking/mutex.c:684 [inline]\n__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752\nwiphy_lock include/net/cfg80211.h:5953 [inline]\nreg_leave_invalid_chans net/wireless/reg.c:2466 [inline]\nreg_check_chans_work+0x10a/0x10e0 net/wireless/reg.c:2481",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40995",
"url": "https://www.suse.com/security/cve/CVE-2024-40995"
},
{
"category": "external",
"summary": "SUSE Bug 1227830 for CVE-2024-40995",
"url": "https://bugzilla.suse.com/1227830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40995"
},
{
"cve": "CVE-2024-40998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix uninitialized ratelimit_state-\u003elock access in __ext4_fill_super()\n\nIn the following concurrency we will access the uninitialized rs-\u003elock:\n\next4_fill_super\n ext4_register_sysfs\n // sysfs registered msg_ratelimit_interval_ms\n // Other processes modify rs-\u003einterval to\n // non-zero via msg_ratelimit_interval_ms\n ext4_orphan_cleanup\n ext4_msg(sb, KERN_INFO, \"Errors on filesystem, \"\n __ext4_msg\n ___ratelimit(\u0026(EXT4_SB(sb)-\u003es_msg_ratelimit_state)\n if (!rs-\u003einterval) // do nothing if interval is 0\n return 1;\n raw_spin_trylock_irqsave(\u0026rs-\u003elock, flags)\n raw_spin_trylock(lock)\n _raw_spin_trylock\n __raw_spin_trylock\n spin_acquire(\u0026lock-\u003edep_map, 0, 1, _RET_IP_)\n lock_acquire\n __lock_acquire\n register_lock_class\n assign_lock_key\n dump_stack();\n ratelimit_state_init(\u0026sbi-\u003es_msg_ratelimit_state, 5 * HZ, 10);\n raw_spin_lock_init(\u0026rs-\u003elock);\n // init rs-\u003elock here\n\nand get the following dump_stack:\n\n=========================================================\nINFO: trying to register non-static key.\nThe code is fine but needs lockdep annotation, or maybe\nyou didn\u0027t initialize this object before use?\nturning off the locking correctness validator.\nCPU: 12 PID: 753 Comm: mount Tainted: G E 6.7.0-rc6-next-20231222 #504\n[...]\nCall Trace:\n dump_stack_lvl+0xc5/0x170\n dump_stack+0x18/0x30\n register_lock_class+0x740/0x7c0\n __lock_acquire+0x69/0x13a0\n lock_acquire+0x120/0x450\n _raw_spin_trylock+0x98/0xd0\n ___ratelimit+0xf6/0x220\n __ext4_msg+0x7f/0x160 [ext4]\n ext4_orphan_cleanup+0x665/0x740 [ext4]\n __ext4_fill_super+0x21ea/0x2b10 [ext4]\n ext4_fill_super+0x14d/0x360 [ext4]\n[...]\n=========================================================\n\nNormally interval is 0 until s_msg_ratelimit_state is initialized, so\n___ratelimit() does nothing. But registering sysfs precedes initializing\nrs-\u003elock, so it is possible to change rs-\u003einterval to a non-zero value\nvia the msg_ratelimit_interval_ms interface of sysfs while rs-\u003elock is\nuninitialized, and then a call to ext4_msg triggers the problem by\naccessing an uninitialized rs-\u003elock. Therefore register sysfs after all\ninitializations are complete to avoid such problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40998",
"url": "https://www.suse.com/security/cve/CVE-2024-40998"
},
{
"category": "external",
"summary": "SUSE Bug 1227866 for CVE-2024-40998",
"url": "https://bugzilla.suse.com/1227866"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40998"
},
{
"cve": "CVE-2024-41005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41005"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetpoll: Fix race condition in netpoll_owner_active\n\nKCSAN detected a race condition in netpoll:\n\n\tBUG: KCSAN: data-race in net_rx_action / netpoll_send_skb\n\twrite (marked) to 0xffff8881164168b0 of 4 bytes by interrupt on cpu 10:\n\tnet_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822)\n\u003csnip\u003e\n\tread to 0xffff8881164168b0 of 4 bytes by task 1 on cpu 2:\n\tnetpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393)\n\tnetpoll_send_udp (net/core/netpoll.c:?)\n\u003csnip\u003e\n\tvalue changed: 0x0000000a -\u003e 0xffffffff\n\nThis happens because netpoll_owner_active() needs to check if the\ncurrent CPU is the owner of the lock, touching napi-\u003epoll_owner\nnon atomically. The -\u003epoll_owner field contains the current CPU holding\nthe lock.\n\nUse an atomic read to check if the poll owner is the current CPU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41005",
"url": "https://www.suse.com/security/cve/CVE-2024-41005"
},
{
"category": "external",
"summary": "SUSE Bug 1227858 for CVE-2024-41005",
"url": "https://bugzilla.suse.com/1227858"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41005"
},
{
"cve": "CVE-2024-41013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41013"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don\u0027t walk off the end of a directory data block\n\nThis adds sanity checks for xfs_dir2_data_unused and xfs_dir2_data_entry\nto make sure don\u0027t stray beyond valid memory region. Before patching, the\nloop simply checks that the start offset of the dup and dep is within the\nrange. So in a crafted image, if last entry is xfs_dir2_data_unused, we\ncan change dup-\u003elength to dup-\u003elength-1 and leave 1 byte of space. In the\nnext traversal, this space will be considered as dup or dep. We may\nencounter an out of bound read when accessing the fixed members.\n\nIn the patch, we make sure that the remaining bytes large enough to hold\nan unused entry before accessing xfs_dir2_data_unused and\nxfs_dir2_data_unused is XFS_DIR2_DATA_ALIGN byte aligned. We also make\nsure that the remaining bytes large enough to hold a dirent with a\nsingle-byte name before accessing xfs_dir2_data_entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41013",
"url": "https://www.suse.com/security/cve/CVE-2024-41013"
},
{
"category": "external",
"summary": "SUSE Bug 1228405 for CVE-2024-41013",
"url": "https://bugzilla.suse.com/1228405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41013"
},
{
"cve": "CVE-2024-41014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41014"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: add bounds checking to xlog_recover_process_data\n\nThere is a lack of verification of the space occupied by fixed members\nof xlog_op_header in the xlog_recover_process_data.\n\nWe can create a crafted image to trigger an out of bounds read by\nfollowing these steps:\n 1) Mount an image of xfs, and do some file operations to leave records\n 2) Before umounting, copy the image for subsequent steps to simulate\n abnormal exit. Because umount will ensure that tail_blk and\n head_blk are the same, which will result in the inability to enter\n xlog_recover_process_data\n 3) Write a tool to parse and modify the copied image in step 2\n 4) Make the end of the xlog_op_header entries only 1 byte away from\n xlog_rec_header-\u003eh_size\n 5) xlog_rec_header-\u003eh_num_logops++\n 6) Modify xlog_rec_header-\u003eh_crc\n\nFix:\nAdd a check to make sure there is sufficient space to access fixed members\nof xlog_op_header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41014",
"url": "https://www.suse.com/security/cve/CVE-2024-41014"
},
{
"category": "external",
"summary": "SUSE Bug 1228408 for CVE-2024-41014",
"url": "https://bugzilla.suse.com/1228408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41014"
},
{
"cve": "CVE-2024-43854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: initialize integrity buffer to zero before writing it to media\n\nMetadata added by bio_integrity_prep is using plain kmalloc, which leads\nto random kernel memory being written media. For PI metadata this is\nlimited to the app tag that isn\u0027t used by kernel generated metadata,\nbut for non-PI metadata the entire buffer leaks kernel memory.\n\nFix this by adding the __GFP_ZERO flag to allocations for writes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43854",
"url": "https://www.suse.com/security/cve/CVE-2024-43854"
},
{
"category": "external",
"summary": "SUSE Bug 1229345 for CVE-2024-43854",
"url": "https://bugzilla.suse.com/1229345"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-43854"
},
{
"cve": "CVE-2024-45018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45018"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: flowtable: initialise extack before use\n\nFix missing initialisation of extack in flow offload.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45018",
"url": "https://www.suse.com/security/cve/CVE-2024-45018"
},
{
"category": "external",
"summary": "SUSE Bug 1230431 for CVE-2024-45018",
"url": "https://bugzilla.suse.com/1230431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.42.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.42.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.42.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-45018"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…