csaf_suse - suse-su-2022:0068-1

Vulnerability from csaf_suse

Published

2022-01-13 14:11

Modified

2022-01-13 14:11

Summary

Security update for the Linux Kernel

Notes

Title of the patch

Security update for the Linux Kernel

Description of the patch

The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162) - CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877) - CVE-2021-0935: Fixed out of bounds write due to a use after free which could lead to local escalation of privilege with System execution privileges needed in ip6_xmit. (bsc#1192032) - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. (bsc#1193575) - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc. (bsc#1193731) - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. (bsc#1194094) - CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c. (bsc#1194087) - CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by do not queueing unlimited number of packages. (bsc#1193442) - CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by fixing rx queue stall detection. (bsc#1193442) - CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening hvc_xen against event channel storms. (bsc#1193440) - CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening netfront against event channel storms. (bsc#1193440) - CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening blkfront against event channel storms. (bsc#1193440) - CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845) - CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bsc#1192847) - CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs. (bsc#1192946) - CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device. (bsc#1179599) The following non-security bugs were fixed: - blk-mq: do not deactivate hctx if managed irq isn't used (bsc#1185762). - cifs: Add new mount parameter 'acdirmax' to allow caching directory metadata (bsc#1190317). - cifs: Add new parameter 'acregmax' for distinct file and directory metadata timeout (bsc#1190317). - cifs: convert list_for_each to entry variant (jsc#SLE-20656). - cifs: convert revalidate of directories to using directory metadata cache timeout (bsc#1190317). - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED (bsc#1190317). - cifs: fiemap: do not return EINVAL if get nothing (bsc#1190317). - cifs: Fix a potencially linear read overflow (git-fixes). - cifs: fix a sign extension bug (git-fixes). - cifs: fix incorrect check for null pointer in header_assemble (bsc#1190317). - cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1190317). - cifs: fix missed refcounting of ipc tcon (git-fixes). - cifs: fix potential use-after-free bugs (jsc#SLE-20656). - cifs: fix print of hdr_flags in dfscache_proc_show() (jsc#SLE-20656). - cifs: fix wrong release in sess_alloc_buffer() failed path (bsc#1190317). - cifs: for compound requests, use open handle if possible (bsc#1190317). - cifs: introduce new helper for cifs_reconnect() (jsc#SLE-20656). - cifs: move to generic async completion (bsc#1190317). - cifs: nosharesock should be set on new server (git-fixes). - cifs: nosharesock should not share socket with future sessions (bsc#1190317). - cifs: On cifs_reconnect, resolve the hostname again (bsc#1190317). - cifs: properly invalidate cached root handle when closing it (bsc#1190317). - cifs: release lock earlier in dequeue_mid error case (bsc#1190317). - cifs: set a minimum of 120s for next dns resolution (bsc#1190317). - cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1190317). - cifs: split out dfs code from cifs_reconnect() (jsc#SLE-20656). - cifs: support nested dfs links over reconnect (jsc#SLE-20656). - cifs: support share failover when remounting (jsc#SLE-20656). - cifs: To match file servers, make sure the server hostname matches (bsc#1190317). - config: INPUT_EVBUG=n (bsc#1192974). Debug driver unsuitable for production, only enabled on ppc64. - constraints: Build aarch64 on recent ARMv8.1 builders. Request asimdrdm feature which is available only on recent ARMv8.1 CPUs. This should prevent scheduling the kernel on an older slower builder. - cred: allow get_cred() and put_cred() to be given NULL (git-fixes). - EDAC/amd64: Handle three rank interleaving mode (bsc#1114648). - elfcore: correct reference to CONFIG_UML (git-fixes). - elfcore: fix building with clang (bsc#1169514). - fuse: release pipe buf after last use (bsc#1193318). - genirq: Move initial affinity setup to irq_startup() (bsc#1193231). - genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (bsc#1193231). - genirq: Remove mask argument from setup_affinity() (bsc#1193231). - genirq: Rename setup_affinity() to irq_setup_affinity() (bsc#1193231). - genirq: Split out irq_startup() code (bsc#1193231). - lpfc: Reintroduce old IRQ probe logic (bsc#1183897). - md: fix a lock order reversal in md_alloc (git-fixes). - net: hso: fix control-request directions (git-fixes). - net: hso: fix muxed tty registration (git-fixes). - net: lan78xx: fix division by zero in send path (git-fixes). - net: mana: Allow setting the number of queues while the NIC is down (jsc#SLE-18779, bsc#1185727). - net: mana: Fix spelling mistake 'calledd' -> 'called' (jsc#SLE-18779, bsc#1185727). - net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (jsc#SLE-18779, bsc#1185727). - net: mana: Improve the HWC error handling (jsc#SLE-18779, bsc#1185727). - net: mana: Support hibernation and kexec (jsc#SLE-18779, bsc#1185727). - net: mana: Use kcalloc() instead of kzalloc() (jsc#SLE-18779, bsc#1185727). - net: pegasus: fix uninit-value in get_interrupt_interval (git-fixes). - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of '0' if no IRQ is available (git-fixes). - nfsd: do not alloc under spinlock in rpc_parse_scope_id (git-fixes). - nfsd: Handle the NFSv4 READDIR 'dircount' hint being zero (git-fixes). - nvme-fc: avoid race between time out and tear down (bsc#1185762). - nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (bsc#1185762). - nvme-fc: update hardware queues before using them (bsc#1185762). - nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (bsc#1183678). - nvme-pci: add NO APST quirk for Kioxia device (git-fixes). - objtool: Support Clang non-section symbols in ORC generation (bsc#1169514). - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (git-fixes). - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (git-fixes). - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (git-fixes). - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (git-fixes). - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (git-fixes). - scsi: core: Put LLD module refcnt after SCSI device is released (git-fixes). - scsi: iscsi: Adjust iface sysfs attr detection (git-fixes). - scsi: lpfc: Add additional debugfs support for CMF (bsc1192145). - scsi: lpfc: Adjust CMF total bytes and rxmonitor (bsc1192145). - scsi: lpfc: Cap CMF read bytes to MBPI (bsc1192145). - scsi: lpfc: Change return code on I/Os received during link bounce (bsc1192145). - scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV (bsc1192145). - scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance (bsc1192145). - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (bsc#1189126). - scsi: lpfc: Fix NPIV port deletion crash (bsc1192145). - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup (bsc1192145). - scsi: lpfc: Update lpfc version to 14.0.0.4 (bsc1192145). - scsi: mpt3sas: Fix kernel panic during drive powercycle test (git-fixes). - scsi: qla2xxx: edif: Fix app start delay (git-fixes). - scsi: qla2xxx: edif: Fix app start fail (git-fixes). - scsi: qla2xxx: edif: Fix EDIF bsg (git-fixes). - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo() (git-fixes). - scsi: qla2xxx: edif: Flush stale events and msgs on session down (git-fixes). - scsi: qla2xxx: edif: Increase ELS payload (git-fixes). - scsi: qla2xxx: Fix gnl list corruption (git-fixes). - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() (git-fixes). - scsi: qla2xxx: Format log strings only if needed (git-fixes). - scsi: qla2xxx: Relogin during fabric disturbance (git-fixes). - smb3: add additional null check in SMB2_ioctl (bsc#1190317). - smb3: add additional null check in SMB2_open (bsc#1190317). - smb3: add additional null check in SMB2_tcon (bsc#1190317). - smb3: correct server pointer dereferencing check to be more consistent (bsc#1190317). - smb3: correct smb3 ACL security descriptor (bsc#1190317). - smb3: do not error on fsync when readonly (bsc#1190317). - smb3: remove trivial dfs compile warning (jsc#SLE-20656). - SUNRPC: async tasks mustn't block waiting for memory (bsc#1191876 bsc#1192866). - SUNRPC: improve 'swap' handling: scheduling and PF_MEMALLOC (bsc#1191876 bsc#1192866). - tracing: Check pid filtering when creating events (git-fixes). - tracing: Fix pid filtering when triggers are attached (git-fixes). - tty: hvc: replace BUG_ON() with negative return value (git-fixes). - usb: Add compatibility quirk flags for iODD 2531/2541 (git-fixes). - usb: dwc2: hcd_queue: Fix use of floating point literal (git-fixes). - usb: serial: option: add Fibocom FM101-GL variants (git-fixes). - usb: serial: option: add prod. id for Quectel EG91 (git-fixes). - usb: serial: option: add Quectel EC200S-CN module support (git-fixes). - usb: serial: option: add Telit LE910Cx composition 0x1204 (git-fixes). - usb: serial: option: add Telit LE910S1 0x9200 composition (git-fixes). - usb: serial: qcserial: add EM9191 QDL support (git-fixes). - x86/msi: Force affinity setup before startup (bsc#1193231). - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (bsc#1114648). - x86/sme: Explicitly map new EFI memmap table as encrypted (bsc#1114648). - x86/xen: Add xenpv_restore_regs_and_return_to_usermode() (bsc#1114648). - x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514). - xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes). - xen/blkfront: do not take local copy of a request from the ring page (git-fixes). - xen/blkfront: do not trust the backend response data blindly (git-fixes). - xen/blkfront: read response from backend only once (git-fixes). - xen/netfront: disentangle tx_skb_freelist (git-fixes). - xen/netfront: do not read data from request on the ring page (git-fixes). - xen/netfront: do not trust the backend response data blindly (git-fixes). - xen/netfront: read response from backend only once (git-fixes).

Patchnames

SUSE-2022-68,SUSE-SLE-HA-12-SP5-2022-68,SUSE-SLE-Live-Patching-12-SP5-2022-68,SUSE-SLE-SDK-12-SP5-2022-68,SUSE-SLE-SERVER-12-SP5-2022-68,SUSE-SLE-WE-12-SP5-2022-68

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)\n- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)\n- CVE-2021-0935: Fixed out of bounds write due to a use after free which could lead to local escalation of privilege with System execution privileges needed in ip6_xmit. (bsc#1192032)\n- CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. (bsc#1193575)\n- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc. (bsc#1193731) \n- CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. (bsc#1194094)\n- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c. (bsc#1194087)\n- CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by do not queueing unlimited number of packages. (bsc#1193442)\n- CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by fixing rx queue stall detection. (bsc#1193442)\n- CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening hvc_xen against event channel storms. (bsc#1193440)\n- CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening netfront against event channel storms. (bsc#1193440)\n- CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening blkfront against event channel storms. (bsc#1193440)\n- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)\n- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bsc#1192847)\n- CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs. (bsc#1192946)\n- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device. (bsc#1179599)\n\nThe following non-security bugs were fixed:\n\n- blk-mq: do not deactivate hctx if managed irq isn't used (bsc#1185762).\n- cifs: Add new mount parameter 'acdirmax' to allow caching directory metadata (bsc#1190317).\n- cifs: Add new parameter 'acregmax' for distinct file and directory metadata timeout (bsc#1190317).\n- cifs: convert list_for_each to entry variant (jsc#SLE-20656).\n- cifs: convert revalidate of directories to using directory metadata cache timeout (bsc#1190317).\n- cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED (bsc#1190317).\n- cifs: fiemap: do not return EINVAL if get nothing (bsc#1190317).\n- cifs: Fix a potencially linear read overflow (git-fixes).\n- cifs: fix a sign extension bug (git-fixes).\n- cifs: fix incorrect check for null pointer in header_assemble (bsc#1190317).\n- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1190317).\n- cifs: fix missed refcounting of ipc tcon (git-fixes).\n- cifs: fix potential use-after-free bugs (jsc#SLE-20656).\n- cifs: fix print of hdr_flags in dfscache_proc_show() (jsc#SLE-20656).\n- cifs: fix wrong release in sess_alloc_buffer() failed path (bsc#1190317).\n- cifs: for compound requests, use open handle if possible (bsc#1190317).\n- cifs: introduce new helper for cifs_reconnect() (jsc#SLE-20656).\n- cifs: move to generic async completion (bsc#1190317).\n- cifs: nosharesock should be set on new server (git-fixes).\n- cifs: nosharesock should not share socket with future sessions (bsc#1190317).\n- cifs: On cifs_reconnect, resolve the hostname again (bsc#1190317).\n- cifs: properly invalidate cached root handle when closing it (bsc#1190317).\n- cifs: release lock earlier in dequeue_mid error case (bsc#1190317).\n- cifs: set a minimum of 120s for next dns resolution (bsc#1190317).\n- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1190317).\n- cifs: split out dfs code from cifs_reconnect() (jsc#SLE-20656).\n- cifs: support nested dfs links over reconnect (jsc#SLE-20656).\n- cifs: support share failover when remounting (jsc#SLE-20656).\n- cifs: To match file servers, make sure the server hostname matches (bsc#1190317).\n- config: INPUT_EVBUG=n (bsc#1192974). Debug driver unsuitable for production, only enabled on ppc64.\n- constraints: Build aarch64 on recent ARMv8.1 builders. Request asimdrdm feature which is available only on recent ARMv8.1 CPUs. This should prevent scheduling the kernel on an older slower builder.\n- cred: allow get_cred() and put_cred() to be given NULL (git-fixes).\n- EDAC/amd64: Handle three rank interleaving mode (bsc#1114648).\n- elfcore: correct reference to CONFIG_UML (git-fixes).\n- elfcore: fix building with clang (bsc#1169514).\n- fuse: release pipe buf after last use (bsc#1193318).\n- genirq: Move initial affinity setup to irq_startup() (bsc#1193231).\n- genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (bsc#1193231).\n- genirq: Remove mask argument from setup_affinity() (bsc#1193231).\n- genirq: Rename setup_affinity() to irq_setup_affinity() (bsc#1193231).\n- genirq: Split out irq_startup() code (bsc#1193231).\n- lpfc: Reintroduce old IRQ probe logic (bsc#1183897).\n- md: fix a lock order reversal in md_alloc (git-fixes).\n- net: hso: fix control-request directions (git-fixes).\n- net: hso: fix muxed tty registration (git-fixes).\n- net: lan78xx: fix division by zero in send path (git-fixes).\n- net: mana: Allow setting the number of queues while the NIC is down (jsc#SLE-18779, bsc#1185727).\n- net: mana: Fix spelling mistake 'calledd' -> 'called' (jsc#SLE-18779, bsc#1185727).\n- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (jsc#SLE-18779, bsc#1185727).\n- net: mana: Improve the HWC error handling (jsc#SLE-18779, bsc#1185727).\n- net: mana: Support hibernation and kexec (jsc#SLE-18779, bsc#1185727).\n- net: mana: Use kcalloc() instead of kzalloc() (jsc#SLE-18779, bsc#1185727).\n- net: pegasus: fix uninit-value in get_interrupt_interval (git-fixes).\n- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of '0' if no IRQ is available (git-fixes).\n- nfsd: do not alloc under spinlock in rpc_parse_scope_id (git-fixes).\n- nfsd: Handle the NFSv4 READDIR 'dircount' hint being zero (git-fixes).\n- nvme-fc: avoid race between time out and tear down (bsc#1185762).\n- nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (bsc#1185762).\n- nvme-fc: update hardware queues before using them (bsc#1185762).\n- nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (bsc#1183678).\n- nvme-pci: add NO APST quirk for Kioxia device (git-fixes).\n- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).\n- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (git-fixes).\n- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (git-fixes).\n- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (git-fixes).\n- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (git-fixes).\n- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (git-fixes).\n- scsi: core: Put LLD module refcnt after SCSI device is released (git-fixes).\n- scsi: iscsi: Adjust iface sysfs attr detection (git-fixes).\n- scsi: lpfc: Add additional debugfs support for CMF (bsc1192145).\n- scsi: lpfc: Adjust CMF total bytes and rxmonitor (bsc1192145).\n- scsi: lpfc: Cap CMF read bytes to MBPI (bsc1192145).\n- scsi: lpfc: Change return code on I/Os received during link bounce (bsc1192145).\n- scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV (bsc1192145).\n- scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance (bsc1192145).\n- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (bsc#1189126).\n- scsi: lpfc: Fix NPIV port deletion crash (bsc1192145).\n- scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup (bsc1192145).\n- scsi: lpfc: Update lpfc version to 14.0.0.4 (bsc1192145).\n- scsi: mpt3sas: Fix kernel panic during drive powercycle test (git-fixes).\n- scsi: qla2xxx: edif: Fix app start delay (git-fixes).\n- scsi: qla2xxx: edif: Fix app start fail (git-fixes).\n- scsi: qla2xxx: edif: Fix EDIF bsg (git-fixes).\n- scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo() (git-fixes).\n- scsi: qla2xxx: edif: Flush stale events and msgs on session down (git-fixes).\n- scsi: qla2xxx: edif: Increase ELS payload (git-fixes).\n- scsi: qla2xxx: Fix gnl list corruption (git-fixes).\n- scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() (git-fixes).\n- scsi: qla2xxx: Format log strings only if needed (git-fixes).\n- scsi: qla2xxx: Relogin during fabric disturbance (git-fixes).\n- smb3: add additional null check in SMB2_ioctl (bsc#1190317).\n- smb3: add additional null check in SMB2_open (bsc#1190317).\n- smb3: add additional null check in SMB2_tcon (bsc#1190317).\n- smb3: correct server pointer dereferencing check to be more consistent (bsc#1190317).\n- smb3: correct smb3 ACL security descriptor (bsc#1190317).\n- smb3: do not error on fsync when readonly (bsc#1190317).\n- smb3: remove trivial dfs compile warning (jsc#SLE-20656).\n- SUNRPC: async tasks mustn't block waiting for memory (bsc#1191876 bsc#1192866).\n- SUNRPC: improve 'swap' handling: scheduling and PF_MEMALLOC (bsc#1191876 bsc#1192866).\n- tracing: Check pid filtering when creating events (git-fixes).\n- tracing: Fix pid filtering when triggers are attached (git-fixes).\n- tty: hvc: replace BUG_ON() with negative return value (git-fixes).\n- usb: Add compatibility quirk flags for iODD 2531/2541 (git-fixes).\n- usb: dwc2: hcd_queue: Fix use of floating point literal (git-fixes).\n- usb: serial: option: add Fibocom FM101-GL variants (git-fixes).\n- usb: serial: option: add prod. id for Quectel EG91 (git-fixes).\n- usb: serial: option: add Quectel EC200S-CN module support (git-fixes).\n- usb: serial: option: add Telit LE910Cx composition 0x1204 (git-fixes).\n- usb: serial: option: add Telit LE910S1 0x9200 composition (git-fixes).\n- usb: serial: qcserial: add EM9191 QDL support (git-fixes).\n- x86/msi: Force affinity setup before startup (bsc#1193231).\n- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (bsc#1114648).\n- x86/sme: Explicitly map new EFI memmap table as encrypted (bsc#1114648).\n- x86/xen: Add xenpv_restore_regs_and_return_to_usermode() (bsc#1114648).\n- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).\n- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).\n- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).\n- xen/blkfront: do not trust the backend response data blindly (git-fixes).\n- xen/blkfront: read response from backend only once (git-fixes).\n- xen/netfront: disentangle tx_skb_freelist (git-fixes).\n- xen/netfront: do not read data from request on the ring page (git-fixes).\n- xen/netfront: do not trust the backend response data blindly (git-fixes).\n- xen/netfront: read response from backend only once (git-fixes).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2022-68,SUSE-SLE-HA-12-SP5-2022-68,SUSE-SLE-Live-Patching-12-SP5-2022-68,SUSE-SLE-SDK-12-SP5-2022-68,SUSE-SLE-SERVER-12-SP5-2022-68,SUSE-SLE-WE-12-SP5-2022-68",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0068-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2022:0068-1",
            url: "https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2022:0068-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1114648",
            url: "https://bugzilla.suse.com/1114648",
         },
         {
            category: "self",
            summary: "SUSE Bug 1124431",
            url: "https://bugzilla.suse.com/1124431",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167162",
            url: "https://bugzilla.suse.com/1167162",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169514",
            url: "https://bugzilla.suse.com/1169514",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172073",
            url: "https://bugzilla.suse.com/1172073",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179599",
            url: "https://bugzilla.suse.com/1179599",
         },
         {
            category: "self",
            summary: "SUSE Bug 1183678",
            url: "https://bugzilla.suse.com/1183678",
         },
         {
            category: "self",
            summary: "SUSE Bug 1183897",
            url: "https://bugzilla.suse.com/1183897",
         },
         {
            category: "self",
            summary: "SUSE Bug 1184804",
            url: "https://bugzilla.suse.com/1184804",
         },
         {
            category: "self",
            summary: "SUSE Bug 1185727",
            url: "https://bugzilla.suse.com/1185727",
         },
         {
            category: "self",
            summary: "SUSE Bug 1185762",
            url: "https://bugzilla.suse.com/1185762",
         },
         {
            category: "self",
            summary: "SUSE Bug 1187167",
            url: "https://bugzilla.suse.com/1187167",
         },
         {
            category: "self",
            summary: "SUSE Bug 1189126",
            url: "https://bugzilla.suse.com/1189126",
         },
         {
            category: "self",
            summary: "SUSE Bug 1189158",
            url: "https://bugzilla.suse.com/1189158",
         },
         {
            category: "self",
            summary: "SUSE Bug 1189305",
            url: "https://bugzilla.suse.com/1189305",
         },
         {
            category: "self",
            summary: "SUSE Bug 1189841",
            url: "https://bugzilla.suse.com/1189841",
         },
         {
            category: "self",
            summary: "SUSE Bug 1190317",
            url: "https://bugzilla.suse.com/1190317",
         },
         {
            category: "self",
            summary: "SUSE Bug 1190358",
            url: "https://bugzilla.suse.com/1190358",
         },
         {
            category: "self",
            summary: "SUSE Bug 1190428",
            url: "https://bugzilla.suse.com/1190428",
         },
         {
            category: "self",
            summary: "SUSE Bug 1191229",
            url: "https://bugzilla.suse.com/1191229",
         },
         {
            category: "self",
            summary: "SUSE Bug 1191384",
            url: "https://bugzilla.suse.com/1191384",
         },
         {
            category: "self",
            summary: "SUSE Bug 1191731",
            url: "https://bugzilla.suse.com/1191731",
         },
         {
            category: "self",
            summary: "SUSE Bug 1191876",
            url: "https://bugzilla.suse.com/1191876",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192032",
            url: "https://bugzilla.suse.com/1192032",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192145",
            url: "https://bugzilla.suse.com/1192145",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192267",
            url: "https://bugzilla.suse.com/1192267",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192740",
            url: "https://bugzilla.suse.com/1192740",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192845",
            url: "https://bugzilla.suse.com/1192845",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192847",
            url: "https://bugzilla.suse.com/1192847",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192866",
            url: "https://bugzilla.suse.com/1192866",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192877",
            url: "https://bugzilla.suse.com/1192877",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192946",
            url: "https://bugzilla.suse.com/1192946",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192974",
            url: "https://bugzilla.suse.com/1192974",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193231",
            url: "https://bugzilla.suse.com/1193231",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193306",
            url: "https://bugzilla.suse.com/1193306",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193318",
            url: "https://bugzilla.suse.com/1193318",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193440",
            url: "https://bugzilla.suse.com/1193440",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193442",
            url: "https://bugzilla.suse.com/1193442",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193575",
            url: "https://bugzilla.suse.com/1193575",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193731",
            url: "https://bugzilla.suse.com/1193731",
         },
         {
            category: "self",
            summary: "SUSE Bug 1194087",
            url: "https://bugzilla.suse.com/1194087",
         },
         {
            category: "self",
            summary: "SUSE Bug 1194094",
            url: "https://bugzilla.suse.com/1194094",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-25020 page",
            url: "https://www.suse.com/security/cve/CVE-2018-25020/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-15126 page",
            url: "https://www.suse.com/security/cve/CVE-2019-15126/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-27820 page",
            url: "https://www.suse.com/security/cve/CVE-2020-27820/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-0920 page",
            url: "https://www.suse.com/security/cve/CVE-2021-0920/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-0935 page",
            url: "https://www.suse.com/security/cve/CVE-2021-0935/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-28711 page",
            url: "https://www.suse.com/security/cve/CVE-2021-28711/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-28712 page",
            url: "https://www.suse.com/security/cve/CVE-2021-28712/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-28713 page",
            url: "https://www.suse.com/security/cve/CVE-2021-28713/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-28714 page",
            url: "https://www.suse.com/security/cve/CVE-2021-28714/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-28715 page",
            url: "https://www.suse.com/security/cve/CVE-2021-28715/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-33098 page",
            url: "https://www.suse.com/security/cve/CVE-2021-33098/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-4002 page",
            url: "https://www.suse.com/security/cve/CVE-2021-4002/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-43975 page",
            url: "https://www.suse.com/security/cve/CVE-2021-43975/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-43976 page",
            url: "https://www.suse.com/security/cve/CVE-2021-43976/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-45485 page",
            url: "https://www.suse.com/security/cve/CVE-2021-45485/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-45486 page",
            url: "https://www.suse.com/security/cve/CVE-2021-45486/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2022-01-13T14:11:18Z",
         generator: {
            date: "2022-01-13T14:11:18Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2022:0068-1",
         initial_release_date: "2022-01-13T14:11:18Z",
         revision_history: [
            {
               date: "2022-01-13T14:11:18Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.106.1.aarch64",
                           product_id: "cluster-md-kmp-default-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.106.1.aarch64",
                           product_id: "dlm-kmp-default-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.106.1.aarch64",
                           product_id: "gfs2-kmp-default-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-default-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-default-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-default-base-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-default-base-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-default-devel-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-default-extra-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-default-kgraft-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-obs-build-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-obs-qa-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-syms-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-syms-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-vanilla-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-vanilla-base-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-vanilla-devel-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.aarch64",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.106.1.aarch64",
                           product_id: "kselftests-kmp-default-4.12.14-122.106.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.106.1.aarch64",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.106.1.aarch64",
                           product_id: "ocfs2-kmp-default-4.12.14-122.106.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-4.12.14-122.106.1.noarch",
                        product: {
                           name: "kernel-devel-4.12.14-122.106.1.noarch",
                           product_id: "kernel-devel-4.12.14-122.106.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-docs-4.12.14-122.106.1.noarch",
                        product: {
                           name: "kernel-docs-4.12.14-122.106.1.noarch",
                           product_id: "kernel-docs-4.12.14-122.106.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-docs-html-4.12.14-122.106.1.noarch",
                        product: {
                           name: "kernel-docs-html-4.12.14-122.106.1.noarch",
                           product_id: "kernel-docs-html-4.12.14-122.106.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-macros-4.12.14-122.106.1.noarch",
                        product: {
                           name: "kernel-macros-4.12.14-122.106.1.noarch",
                           product_id: "kernel-macros-4.12.14-122.106.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-4.12.14-122.106.1.noarch",
                        product: {
                           name: "kernel-source-4.12.14-122.106.1.noarch",
                           product_id: "kernel-source-4.12.14-122.106.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-vanilla-4.12.14-122.106.1.noarch",
                        product: {
                           name: "kernel-source-vanilla-4.12.14-122.106.1.noarch",
                           product_id: "kernel-source-vanilla-4.12.14-122.106.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                           product_id: "cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                           product_id: "dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                           product_id: "gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-debug-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-debug-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-base-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-debug-base-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-debug-base-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-devel-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-debug-devel-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-debug-devel-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-kgraft-devel-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-debug-kgraft-devel-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-debug-kgraft-devel-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-default-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-default-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-default-base-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-default-base-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-default-devel-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-default-extra-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-obs-build-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-obs-qa-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-syms-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-syms-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-vanilla-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-vanilla-base-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-vanilla-devel-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.ppc64le",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                        product: {
                           name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                           product_id: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.106.1.ppc64le",
                           product_id: "kselftests-kmp-default-4.12.14-122.106.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                           product_id: "ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                           product_id: "cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.106.1.s390x",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.106.1.s390x",
                           product_id: "dlm-kmp-default-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.106.1.s390x",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.106.1.s390x",
                           product_id: "gfs2-kmp-default-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-base-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-base-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-devel-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-extra-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-kgraft-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-man-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-default-man-4.12.14-122.106.1.s390x",
                           product_id: "kernel-default-man-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.106.1.s390x",
                           product_id: "kernel-obs-build-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.106.1.s390x",
                           product_id: "kernel-obs-qa-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-syms-4.12.14-122.106.1.s390x",
                           product_id: "kernel-syms-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.106.1.s390x",
                           product_id: "kernel-vanilla-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.106.1.s390x",
                           product_id: "kernel-vanilla-base-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.106.1.s390x",
                           product_id: "kernel-vanilla-devel-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.s390x",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-zfcpdump-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-zfcpdump-4.12.14-122.106.1.s390x",
                           product_id: "kernel-zfcpdump-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-zfcpdump-man-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kernel-zfcpdump-man-4.12.14-122.106.1.s390x",
                           product_id: "kernel-zfcpdump-man-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                        product: {
                           name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                           product_id: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.106.1.s390x",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.106.1.s390x",
                           product_id: "kselftests-kmp-default-4.12.14-122.106.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                           product_id: "ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                           product_id: "cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.106.1.x86_64",
                           product_id: "dlm-kmp-default-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                           product_id: "gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-debug-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-debug-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-base-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-debug-base-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-debug-base-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-debug-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-debug-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-kgraft-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-debug-kgraft-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-debug-kgraft-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-default-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-default-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-default-base-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-default-base-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-default-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-default-extra-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-kvmsmall-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-base-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-base-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-kvmsmall-base-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-kvmsmall-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-kgraft-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-kgraft-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-kvmsmall-kgraft-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-obs-build-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-obs-qa-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-syms-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-syms-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-vanilla-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-vanilla-base-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-vanilla-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.x86_64",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                        product: {
                           name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                           product_id: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.106.1.x86_64",
                           product_id: "kselftests-kmp-default-4.12.14-122.106.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                           product_id: "ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Availability Extension 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise High Availability Extension 12 SP5",
                           product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-ha:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Live Patching 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Live Patching 12 SP5",
                           product_id: "SUSE Linux Enterprise Live Patching 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-live-patching:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP5",
                           product_id: "SUSE Linux Enterprise Server 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 12 SP5",
                           product_id: "SUSE Linux Enterprise Workstation Extension 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:12:sp5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-default-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-default-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
            },
            product_reference: "cluster-md-kmp-default-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-default-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
            },
            product_reference: "cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-default-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "dlm-kmp-default-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-default-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
            },
            product_reference: "dlm-kmp-default-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-default-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
            },
            product_reference: "dlm-kmp-default-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-default-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-default-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
            },
            product_reference: "gfs2-kmp-default-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-default-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
            },
            product_reference: "gfs2-kmp-default-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-default-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-default-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
            },
            product_reference: "ocfs2-kmp-default-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-default-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
            },
            product_reference: "ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-kgraft-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-kgraft-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-devel-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
            },
            product_reference: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
            },
            product_reference: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
            },
            product_reference: "kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-docs-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-docs-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-obs-build-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-obs-build-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-obs-build-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-obs-build-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-man-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-man-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-devel-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-macros-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-macros-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-source-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-base-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-man-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-default-man-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-devel-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-macros-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-macros-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-4.12.14-122.106.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
            },
            product_reference: "kernel-source-4.12.14-122.106.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-syms-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-extra-4.12.14-122.106.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP5",
               product_id: "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            },
            product_reference: "kernel-default-extra-4.12.14-122.106.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2018-25020",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-25020",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-25020",
               url: "https://www.suse.com/security/cve/CVE-2018-25020",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193575 for CVE-2018-25020",
               url: "https://bugzilla.suse.com/1193575",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "important",
            },
         ],
         title: "CVE-2018-25020",
      },
      {
         cve: "CVE-2019-15126",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-15126",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-15126",
               url: "https://www.suse.com/security/cve/CVE-2019-15126",
            },
            {
               category: "external",
               summary: "SUSE Bug 1167162 for CVE-2019-15126",
               url: "https://bugzilla.suse.com/1167162",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.1,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "important",
            },
         ],
         title: "CVE-2019-15126",
      },
      {
         cve: "CVE-2020-27820",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-27820",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if \"unbind\" the driver).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-27820",
               url: "https://www.suse.com/security/cve/CVE-2020-27820",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179599 for CVE-2020-27820",
               url: "https://bugzilla.suse.com/1179599",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.1,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "low",
            },
         ],
         title: "CVE-2020-27820",
      },
      {
         cve: "CVE-2021-0920",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-0920",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-0920",
               url: "https://www.suse.com/security/cve/CVE-2021-0920",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193731 for CVE-2021-0920",
               url: "https://bugzilla.suse.com/1193731",
            },
            {
               category: "external",
               summary: "SUSE Bug 1194463 for CVE-2021-0920",
               url: "https://bugzilla.suse.com/1194463",
            },
            {
               category: "external",
               summary: "SUSE Bug 1195939 for CVE-2021-0920",
               url: "https://bugzilla.suse.com/1195939",
            },
            {
               category: "external",
               summary: "SUSE Bug 1199255 for CVE-2021-0920",
               url: "https://bugzilla.suse.com/1199255",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200084 for CVE-2021-0920",
               url: "https://bugzilla.suse.com/1200084",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "important",
            },
         ],
         title: "CVE-2021-0920",
      },
      {
         cve: "CVE-2021-0935",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-0935",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-0935",
               url: "https://www.suse.com/security/cve/CVE-2021-0935",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192032 for CVE-2021-0935",
               url: "https://bugzilla.suse.com/1192032",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192042 for CVE-2021-0935",
               url: "https://bugzilla.suse.com/1192042",
            },
            {
               category: "external",
               summary: "SUSE Bug 1196722 for CVE-2021-0935",
               url: "https://bugzilla.suse.com/1196722",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "important",
            },
         ],
         title: "CVE-2021-0935",
      },
      {
         cve: "CVE-2021-28711",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-28711",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-28711",
               url: "https://www.suse.com/security/cve/CVE-2021-28711",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193440 for CVE-2021-28711",
               url: "https://bugzilla.suse.com/1193440",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-28711",
      },
      {
         cve: "CVE-2021-28712",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-28712",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-28712",
               url: "https://www.suse.com/security/cve/CVE-2021-28712",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193440 for CVE-2021-28712",
               url: "https://bugzilla.suse.com/1193440",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-28712",
      },
      {
         cve: "CVE-2021-28713",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-28713",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-28713",
               url: "https://www.suse.com/security/cve/CVE-2021-28713",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193440 for CVE-2021-28713",
               url: "https://bugzilla.suse.com/1193440",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-28713",
      },
      {
         cve: "CVE-2021-28714",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-28714",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-28714",
               url: "https://www.suse.com/security/cve/CVE-2021-28714",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193442 for CVE-2021-28714",
               url: "https://bugzilla.suse.com/1193442",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-28714",
      },
      {
         cve: "CVE-2021-28715",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-28715",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-28715",
               url: "https://www.suse.com/security/cve/CVE-2021-28715",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193442 for CVE-2021-28715",
               url: "https://bugzilla.suse.com/1193442",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-28715",
      },
      {
         cve: "CVE-2021-33098",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-33098",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-33098",
               url: "https://www.suse.com/security/cve/CVE-2021-33098",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192877 for CVE-2021-33098",
               url: "https://bugzilla.suse.com/1192877",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-33098",
      },
      {
         cve: "CVE-2021-4002",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-4002",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-4002",
               url: "https://www.suse.com/security/cve/CVE-2021-4002",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192946 for CVE-2021-4002",
               url: "https://bugzilla.suse.com/1192946",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192973 for CVE-2021-4002",
               url: "https://bugzilla.suse.com/1192973",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-4002",
      },
      {
         cve: "CVE-2021-43975",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-43975",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-43975",
               url: "https://www.suse.com/security/cve/CVE-2021-43975",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192845 for CVE-2021-43975",
               url: "https://bugzilla.suse.com/1192845",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-43975",
      },
      {
         cve: "CVE-2021-43976",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-43976",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-43976",
               url: "https://www.suse.com/security/cve/CVE-2021-43976",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192847 for CVE-2021-43976",
               url: "https://bugzilla.suse.com/1192847",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-43976",
      },
      {
         cve: "CVE-2021-45485",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-45485",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-45485",
               url: "https://www.suse.com/security/cve/CVE-2021-45485",
            },
            {
               category: "external",
               summary: "SUSE Bug 1194094 for CVE-2021-45485",
               url: "https://bugzilla.suse.com/1194094",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "low",
            },
         ],
         title: "CVE-2021-45485",
      },
      {
         cve: "CVE-2021-45486",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-45486",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-45486",
               url: "https://www.suse.com/security/cve/CVE-2021-45486",
            },
            {
               category: "external",
               summary: "SUSE Bug 1194087 for CVE-2021-45486",
               url: "https://bugzilla.suse.com/1194087",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-01-13T14:11:18Z",
               details: "low",
            },
         ],
         title: "CVE-2021-45486",
      },
   ],
}

cve-2021-0920

Vulnerability from cvelistv5

Published

2021-12-15 18:05

Modified

2025-02-04 19:04

Severity ?

6.4 (Medium) - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

References

▼	URL	Tags
	https://source.android.com/security/bulletin/2021-11-01	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	Android	Version: Android kernel

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T15:55:16.898Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/2021-11-01",
               },
               {
                  name: "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "HIGH",
                     attackVector: "LOCAL",
                     availabilityImpact: "HIGH",
                     baseScore: 6.4,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "HIGH",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2021-0920",
                        options: [
                           {
                              Exploitation: "active",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-02-06T16:18:51.272894Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
               {
                  other: {
                     content: {
                        dateAdded: "2022-05-23",
                        reference: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-0920",
                     },
                     type: "kev",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-04T19:04:20.727Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Android",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Android kernel",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Elevation of privilege",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-12-17T00:06:43.000Z",
            orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
            shortName: "google_android",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://source.android.com/security/bulletin/2021-11-01",
            },
            {
               name: "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@android.com",
               ID: "CVE-2021-0920",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Android",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "Android kernel",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Elevation of privilege",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://source.android.com/security/bulletin/2021-11-01",
                     refsource: "MISC",
                     url: "https://source.android.com/security/bulletin/2021-11-01",
                  },
                  {
                     name: "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
      assignerShortName: "google_android",
      cveId: "CVE-2021-0920",
      datePublished: "2021-12-15T18:05:31.000Z",
      dateReserved: "2020-11-06T00:00:00.000Z",
      dateUpdated: "2025-02-04T19:04:20.727Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-0935

Vulnerability from cvelistv5

Published

2021-10-25 13:20

Modified

2024-08-03 15:55

Severity ?

Summary

In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel

References

▼	URL	Tags
	https://source.android.com/security/bulletin/pixel/2021-10-01	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Android	Version: Android kernel

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T15:55:18.050Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/pixel/2021-10-01",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Android",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Android kernel",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Elevation of privilege",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-10-25T13:20:25",
            orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
            shortName: "google_android",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://source.android.com/security/bulletin/pixel/2021-10-01",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@android.com",
               ID: "CVE-2021-0935",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Android",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "Android kernel",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Elevation of privilege",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://source.android.com/security/bulletin/pixel/2021-10-01",
                     refsource: "MISC",
                     url: "https://source.android.com/security/bulletin/pixel/2021-10-01",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
      assignerShortName: "google_android",
      cveId: "CVE-2021-0935",
      datePublished: "2021-10-25T13:20:25",
      dateReserved: "2020-11-06T00:00:00",
      dateUpdated: "2024-08-03T15:55:18.050Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-33098

Vulnerability from cvelistv5

Published

2021-11-17 19:12

Modified

2024-08-03 23:42

Severity ?

Summary

Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.

References

▼	URL	Tags
	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20211210-0005/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Intel(R) Ethernet ixgbe driver for Linux	Version: before version 3.17.3

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T23:42:19.568Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20211210-0005/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Intel(R) Ethernet ixgbe driver for Linux",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "before version 3.17.3",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "denial of service",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-12-10T06:06:20",
            orgId: "6dda929c-bb53-4a77-a76d-48e79601a1ce",
            shortName: "intel",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20211210-0005/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secure@intel.com",
               ID: "CVE-2021-33098",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Intel(R) Ethernet ixgbe driver for Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "before version 3.17.3",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "denial of service",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html",
                     refsource: "MISC",
                     url: "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20211210-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20211210-0005/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "6dda929c-bb53-4a77-a76d-48e79601a1ce",
      assignerShortName: "intel",
      cveId: "CVE-2021-33098",
      datePublished: "2021-11-17T19:12:10",
      dateReserved: "2021-05-18T00:00:00",
      dateUpdated: "2024-08-03T23:42:19.568Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-28714

Vulnerability from cvelistv5

Published

2022-01-06 17:06

Modified

2024-08-03 21:55

Severity ?

Summary

Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-392.txt	x_refsource_MISC
	https://www.debian.org/security/2022/dsa-5050	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Linux	Linux

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T21:55:11.570Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
               },
               {
                  name: "DSA-5050",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5050",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-392",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by  Jürgen Groß of SUSE.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "The Linux kernel's xen-netback backend driver can be forced by guests\nto queue arbitrary amounts of network data, finally causing an out of\nmemory situation in the domain the backend is running in (usually dom0).",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-10T02:07:11",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
            },
            {
               name: "DSA-5050",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5050",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2021-28714",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-392",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All systems using the Linux kernel based network backend xen-netback\nare vulnerable.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "This issue was discovered by  Jürgen Groß of SUSE.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "The Linux kernel's xen-netback backend driver can be forced by guests\nto queue arbitrary amounts of network data, finally causing an out of\nmemory situation in the domain the backend is running in (usually dom0).",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
                  },
                  {
                     name: "DSA-5050",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5050",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "Using another PV network backend (e.g. the qemu based \"qnic\" backend)\nwill mitigate the problem.\n\nUsing a dedicated network driver domain per guest will mitigate the\nproblem.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2021-28714",
      datePublished: "2022-01-06T17:06:04",
      dateReserved: "2021-03-18T00:00:00",
      dateUpdated: "2024-08-03T21:55:11.570Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-25020

Vulnerability from cvelistv5

Published

2021-12-08 04:47

Modified

2024-08-05 12:26

Severity ?

Summary

The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.

References

▼	URL	Tags
	https://github.com/torvalds/linux/commit/050fad7c4534c13c8eb1d9c2ba66012e014773cb	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20211229-0005/	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T12:26:39.651Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/torvalds/linux/commit/050fad7c4534c13c8eb1d9c2ba66012e014773cb",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20211229-0005/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-01-06T19:06:17",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/torvalds/linux/commit/050fad7c4534c13c8eb1d9c2ba66012e014773cb",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20211229-0005/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-25020",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/torvalds/linux/commit/050fad7c4534c13c8eb1d9c2ba66012e014773cb",
                     refsource: "MISC",
                     url: "https://github.com/torvalds/linux/commit/050fad7c4534c13c8eb1d9c2ba66012e014773cb",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20211229-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20211229-0005/",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-25020",
      datePublished: "2021-12-08T04:47:45",
      dateReserved: "2021-12-08T00:00:00",
      dateUpdated: "2024-08-05T12:26:39.651Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-43975

Vulnerability from cvelistv5

Published

2021-11-17 16:32

Modified

2024-08-04 04:10

Severity ?

Summary

In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.

References

▼	URL	Tags
	https://lore.kernel.org/netdev/163698540868.13805.17800408021782408762.git-patchwork-notify%40kernel.org/T/	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/	vendor-advisory, x_refsource_FEDORA
	https://security.netapp.com/advisory/ntap-20211210-0001/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:10:17.165Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lore.kernel.org/netdev/163698540868.13805.17800408021782408762.git-patchwork-notify%40kernel.org/T/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496",
               },
               {
                  name: "FEDORA-2021-eab8c5a263",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/",
               },
               {
                  name: "FEDORA-2021-c09b851eb0",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20211210-0001/",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-10T02:06:54",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lore.kernel.org/netdev/163698540868.13805.17800408021782408762.git-patchwork-notify%40kernel.org/T/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496",
            },
            {
               name: "FEDORA-2021-eab8c5a263",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/",
            },
            {
               name: "FEDORA-2021-c09b851eb0",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20211210-0001/",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2021-43975",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lore.kernel.org/netdev/163698540868.13805.17800408021782408762.git-patchwork-notify@kernel.org/T/",
                     refsource: "MISC",
                     url: "https://lore.kernel.org/netdev/163698540868.13805.17800408021782408762.git-patchwork-notify@kernel.org/T/",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496",
                  },
                  {
                     name: "FEDORA-2021-eab8c5a263",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/",
                  },
                  {
                     name: "FEDORA-2021-c09b851eb0",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20211210-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20211210-0001/",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2021-43975",
      datePublished: "2021-11-17T16:32:30",
      dateReserved: "2021-11-17T00:00:00",
      dateUpdated: "2024-08-04T04:10:17.165Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27820

Vulnerability from cvelistv5

Published

2021-11-02 23:26

Modified

2024-08-04 16:25

Severity ?

Summary

A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver).

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1901726	x_refsource_MISC
	https://lore.kernel.org/dri-devel/20201103194912.184413-2-jcline%40redhat.com/	x_refsource_MISC
	https://lore.kernel.org/dri-devel/20201103194912.184413-3-jcline%40redhat.com/	x_refsource_MISC
	https://lore.kernel.org/dri-devel/20201103194912.184413-4-jcline%40redhat.com/	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	kernel	Version: to be fixed in RHEL-9 release

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.062Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901726",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lore.kernel.org/dri-devel/20201103194912.184413-2-jcline%40redhat.com/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lore.kernel.org/dri-devel/20201103194912.184413-3-jcline%40redhat.com/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lore.kernel.org/dri-devel/20201103194912.184413-4-jcline%40redhat.com/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "to be fixed in RHEL-9 release",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if \"unbind\" the driver).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-416",
                     description: "CWE-416",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-25T16:16:46",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901726",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lore.kernel.org/dri-devel/20201103194912.184413-2-jcline%40redhat.com/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lore.kernel.org/dri-devel/20201103194912.184413-3-jcline%40redhat.com/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lore.kernel.org/dri-devel/20201103194912.184413-4-jcline%40redhat.com/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27820",
      datePublished: "2021-11-02T23:26:20",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.062Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-28713

Vulnerability from cvelistv5

Published

2022-01-05 16:10

Modified

2024-08-03 21:55

Severity ?

Summary

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-391.txt	x_refsource_MISC
	https://www.debian.org/security/2022/dsa-5050	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Linux	Linux

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T21:55:11.785Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
               },
               {
                  name: "DSA-5050",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5050",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-391",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by Jürgen Groß of SUSE.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "Potentially malicious PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-10T02:06:49",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
            },
            {
               name: "DSA-5050",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5050",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2021-28713",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-391",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All guests being serviced by potentially malicious backends are vulnerable,\neven if those backends are running in a less privileged environment. The\nvulnerability is not affecting the host, but the guests.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "This issue was discovered by Jürgen Groß of SUSE.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "Potentially malicious PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
                  },
                  {
                     name: "DSA-5050",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5050",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no known mitigation available.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2021-28713",
      datePublished: "2022-01-05T16:10:24",
      dateReserved: "2021-03-18T00:00:00",
      dateUpdated: "2024-08-03T21:55:11.785Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-45485

Vulnerability from cvelistv5

Published

2021-12-25 01:05

Modified

2024-08-04 04:39

Severity ?

Summary

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

References

▼	URL	Tags
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3	x_refsource_MISC
	https://arxiv.org/pdf/2112.09604.pdf	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220121-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:39:21.141Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://arxiv.org/pdf/2112.09604.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220121-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-25T16:42:06",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://arxiv.org/pdf/2112.09604.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20220121-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2021-45485",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3",
                  },
                  {
                     name: "https://arxiv.org/pdf/2112.09604.pdf",
                     refsource: "MISC",
                     url: "https://arxiv.org/pdf/2112.09604.pdf",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2022.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20220121-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20220121-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2021-45485",
      datePublished: "2021-12-25T01:05:07",
      dateReserved: "2021-12-25T00:00:00",
      dateUpdated: "2024-08-04T04:39:21.141Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-28712

Vulnerability from cvelistv5

Published

2022-01-05 16:10

Modified

2024-08-03 21:55

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-391.txt	x_refsource_MISC
	https://www.debian.org/security/2022/dsa-5050	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Linux	Linux

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T21:55:11.592Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
               },
               {
                  name: "DSA-5050",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5050",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-391",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by Jürgen Groß of SUSE.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "Potentially malicious PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-10T02:06:52",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
            },
            {
               name: "DSA-5050",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5050",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2021-28712",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-391",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All guests being serviced by potentially malicious backends are vulnerable,\neven if those backends are running in a less privileged environment. The\nvulnerability is not affecting the host, but the guests.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "This issue was discovered by Jürgen Groß of SUSE.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "Potentially malicious PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
                  },
                  {
                     name: "DSA-5050",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5050",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no known mitigation available.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2021-28712",
      datePublished: "2022-01-05T16:10:23",
      dateReserved: "2021-03-18T00:00:00",
      dateUpdated: "2024-08-03T21:55:11.592Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-15126

Vulnerability from cvelistv5

Published

2020-02-05 16:17

Modified

2024-08-05 00:34

Severity ?

Summary

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.

References

▼	URL	Tags
	https://support.apple.com/kb/HT210721	x_refsource_CONFIRM
	https://support.apple.com/kb/HT210722	x_refsource_CONFIRM
	https://support.apple.com/kb/HT210788	x_refsource_CONFIRM
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure	vendor-advisory, x_refsource_CISCO
	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0001	x_refsource_CONFIRM
	http://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en	x_refsource_CONFIRM
	https://www.mist.com/documentation/mist-security-advisory-kr00k-attack-faq/	x_refsource_CONFIRM
	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-003.txt	x_refsource_CONFIRM
	https://www.synology.com/security/advisory/Synology_SA_20_03	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/156809/Broadcom-Wi-Fi-KR00K-Proof-Of-Concept.html	x_refsource_MISC
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-712518.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-20-224-05	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T00:34:53.246Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT210721",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT210722",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT210788",
               },
               {
                  name: "20200227 Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0001",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.mist.com/documentation/mist-security-advisory-kr00k-attack-faq/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-003.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.synology.com/security/advisory/Synology_SA_20_03",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/156809/Broadcom-Wi-Fi-KR00K-Proof-Of-Concept.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-712518.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-20-224-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-08-11T18:08:27",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT210721",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT210722",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT210788",
            },
            {
               name: "20200227 Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0001",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.mist.com/documentation/mist-security-advisory-kr00k-attack-faq/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-003.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.synology.com/security/advisory/Synology_SA_20_03",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/156809/Broadcom-Wi-Fi-KR00K-Proof-Of-Concept.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-712518.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-20-224-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-15126",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://support.apple.com/kb/HT210721",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT210721",
                  },
                  {
                     name: "https://support.apple.com/kb/HT210722",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT210722",
                  },
                  {
                     name: "https://support.apple.com/kb/HT210788",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT210788",
                  },
                  {
                     name: "20200227 Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability",
                     refsource: "CISCO",
                     url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure",
                  },
                  {
                     name: "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0001",
                     refsource: "CONFIRM",
                     url: "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0001",
                  },
                  {
                     name: "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en",
                     refsource: "CONFIRM",
                     url: "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en",
                  },
                  {
                     name: "https://www.mist.com/documentation/mist-security-advisory-kr00k-attack-faq/",
                     refsource: "CONFIRM",
                     url: "https://www.mist.com/documentation/mist-security-advisory-kr00k-attack-faq/",
                  },
                  {
                     name: "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-003.txt",
                     refsource: "CONFIRM",
                     url: "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-003.txt",
                  },
                  {
                     name: "https://www.synology.com/security/advisory/Synology_SA_20_03",
                     refsource: "CONFIRM",
                     url: "https://www.synology.com/security/advisory/Synology_SA_20_03",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/156809/Broadcom-Wi-Fi-KR00K-Proof-Of-Concept.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/156809/Broadcom-Wi-Fi-KR00K-Proof-Of-Concept.html",
                  },
                  {
                     name: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en",
                     refsource: "CONFIRM",
                     url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-712518.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-712518.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-20-224-05",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-20-224-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-15126",
      datePublished: "2020-02-05T16:17:37",
      dateReserved: "2019-08-17T00:00:00",
      dateUpdated: "2024-08-05T00:34:53.246Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-4002

Vulnerability from cvelistv5

Published

2022-03-03 21:42

Modified

2024-08-03 17:16

Severity ?

Summary

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=2025726	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2021/11/25/1	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	kernel	Version: affects kernel v3.6 and later through v5.15.5.

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:16:03.279Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2025726",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2021/11/25/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "affects kernel v3.6 and later through v5.15.5.",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-459",
                     description: "CWE-459",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-25T16:42:37",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2025726",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2021/11/25/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2021-4002",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "affects kernel v3.6 and later through v5.15.5.",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-459",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=2025726",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=2025726",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2021/11/25/1",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2021/11/25/1",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2022.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-4002",
      datePublished: "2022-03-03T21:42:47",
      dateReserved: "2021-11-22T00:00:00",
      dateUpdated: "2024-08-03T17:16:03.279Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-28711

Vulnerability from cvelistv5

Published

2022-01-05 16:10

Modified

2024-08-03 21:47

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-391.txt	x_refsource_MISC
	https://www.debian.org/security/2022/dsa-5050	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Linux	Linux

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T21:47:33.240Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
               },
               {
                  name: "DSA-5050",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5050",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-391",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by Jürgen Groß of SUSE.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "Potentially malicious PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-10T02:06:43",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
            },
            {
               name: "DSA-5050",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5050",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2021-28711",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-391",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All guests being serviced by potentially malicious backends are vulnerable,\neven if those backends are running in a less privileged environment. The\nvulnerability is not affecting the host, but the guests.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "This issue was discovered by Jürgen Groß of SUSE.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "Potentially malicious PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-391.txt",
                  },
                  {
                     name: "DSA-5050",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5050",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no known mitigation available.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2021-28711",
      datePublished: "2022-01-05T16:10:22",
      dateReserved: "2021-03-18T00:00:00",
      dateUpdated: "2024-08-03T21:47:33.240Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-45486

Vulnerability from cvelistv5

Published

2021-12-25 01:04

Modified

2024-08-04 04:39

Severity ?

Summary

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.

References

▼	URL	Tags
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4	x_refsource_MISC
	https://arxiv.org/pdf/2112.09604.pdf	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:39:21.222Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://arxiv.org/pdf/2112.09604.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-25T16:42:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://arxiv.org/pdf/2112.09604.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2021-45486",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4",
                  },
                  {
                     name: "https://arxiv.org/pdf/2112.09604.pdf",
                     refsource: "MISC",
                     url: "https://arxiv.org/pdf/2112.09604.pdf",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2022.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2021-45486",
      datePublished: "2021-12-25T01:04:27",
      dateReserved: "2021-12-25T00:00:00",
      dateUpdated: "2024-08-04T04:39:21.222Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-28715

Vulnerability from cvelistv5

Published

2022-01-06 17:06

Modified

2024-08-03 21:55

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-392.txt	x_refsource_MISC
	https://www.debian.org/security/2022/dsa-5050	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Linux	Linux

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T21:55:11.622Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
               },
               {
                  name: "DSA-5050",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5050",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-392",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by  Jürgen Groß of SUSE.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "The Linux kernel's xen-netback backend driver can be forced by guests\nto queue arbitrary amounts of network data, finally causing an out of\nmemory situation in the domain the backend is running in (usually dom0).",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-10T02:07:03",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
            },
            {
               name: "DSA-5050",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5050",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2021-28715",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-392",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All systems using the Linux kernel based network backend xen-netback\nare vulnerable.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "This issue was discovered by  Jürgen Groß of SUSE.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "The Linux kernel's xen-netback backend driver can be forced by guests\nto queue arbitrary amounts of network data, finally causing an out of\nmemory situation in the domain the backend is running in (usually dom0).",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-392.txt",
                  },
                  {
                     name: "DSA-5050",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5050",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
                  },
                  {
                     name: "DSA-5096",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5096",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "Using another PV network backend (e.g. the qemu based \"qnic\" backend)\nwill mitigate the problem.\n\nUsing a dedicated network driver domain per guest will mitigate the\nproblem.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2021-28715",
      datePublished: "2022-01-06T17:06:05",
      dateReserved: "2021-03-18T00:00:00",
      dateUpdated: "2024-08-03T21:55:11.622Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-43976

Vulnerability from cvelistv5

Published

2021-11-17 00:00

Modified

2024-08-04 04:10

Severity ?

Summary

In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).

References

▼	URL	Tags
	https://patchwork.kernel.org/project/linux-wireless/patch/YX4CqjfRcTa6bVL+%40Zekuns-MBP-16.fios-router.home/
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5092	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html	mailing-list
	https://www.debian.org/security/2022/dsa-5096	vendor-advisory
	https://www.oracle.com/security-alerts/cpujul2022.html
	https://security.netapp.com/advisory/ntap-20211210-0001/
	https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04d80663f67ccef893061b49ec8a42ff7045ae84

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:10:17.274Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://patchwork.kernel.org/project/linux-wireless/patch/YX4CqjfRcTa6bVL+%40Zekuns-MBP-16.fios-router.home/",
               },
               {
                  name: "FEDORA-2021-eab8c5a263",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/",
               },
               {
                  name: "FEDORA-2021-c09b851eb0",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/",
               },
               {
                  name: "DSA-5092",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5092",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
               },
               {
                  name: "DSA-5096",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5096",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20211210-0001/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04d80663f67ccef893061b49ec8a42ff7045ae84",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-03-25T00:39:33.878998",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://patchwork.kernel.org/project/linux-wireless/patch/YX4CqjfRcTa6bVL+%40Zekuns-MBP-16.fios-router.home/",
            },
            {
               name: "FEDORA-2021-eab8c5a263",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/",
            },
            {
               name: "FEDORA-2021-c09b851eb0",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/",
            },
            {
               name: "DSA-5092",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2022/dsa-5092",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
            },
            {
               name: "DSA-5096",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2022/dsa-5096",
            },
            {
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20211210-0001/",
            },
            {
               url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04d80663f67ccef893061b49ec8a42ff7045ae84",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2021-43976",
      datePublished: "2021-11-17T00:00:00",
      dateReserved: "2021-11-17T00:00:00",
      dateUpdated: "2024-08-04T04:10:17.274Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature