csaf_suse - suse-su-2022:2741-1

Vulnerability from csaf_suse

Published

2022-08-10 07:23

Modified

2022-08-10 07:23

Summary

Security update for the Linux Kernel

Notes

Title of the patch

Security update for the Linux Kernel

Description of the patch

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-2022-29581: Fixed improper update of reference count in net/sched that could cause root privilege escalation (bnc#1199665). - CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598). - CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910). - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs that could lead to a use-after-free (bnc#1201429). - CVE-2021-33655: Fixed an out of bounds write by ioctl cmd FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2021-33656: Fixed an out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636). - CVE-2022-21505: Fixed a kernel lockdown bypass via IMA policy (bsc#1201458). - CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829). - CVE-2022-1116: Fixed an integer overflow vulnerability in io_uring which allowed a local attacker to escalate privileges to root (bnc#1199647).- CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251). - CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762). The following non-security bugs were fixed: - Fixed a system crash related to the recent RETBLEED mitigation (bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676). - qla2xxx: drop patch which prevented nvme port discovery (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958). - kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930). - bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature (bsc#1199364). - bpf: enable BPF type format (BTF) (jsc#SLE-24559). - nfs: avoid NULL pointer dereference when there is unflushed data (bsc#1201196). - hv_netvsc: Add (more) validation for untrusted Hyper-V values (bsc#1199364). - hv_netvsc: Add comment of netvsc_xdp_xmit() (bsc#1199364). - hv_netvsc: Add support for XDP_REDIRECT (bsc#1199364). - hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer (bsc#1199364). - hv_netvsc: Fix validation in netvsc_linkstatus_callback() (bsc#1199364). - kvm/emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930). - lkdtm: Disable return thunks in rodata.c (bsc#1178134). - net, xdp: Introduce __xdp_build_skb_from_frame utility routine (bsc#1199364). - net, xdp: Introduce xdp_build_skb_from_frame utility routine (bsc#1199364). - nvme: consider also host_iface when checking ip options (bsc#1199670). - powerpc/mobility: wait for memory transfer to complete (bsc#1201846 ltc#198761). - powerpc/pseries/mobility: set NMI watchdog factor during an LPM (bsc#1201846 ltc#198761). - powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846 ltc#198761). - scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956). - scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (bsc#1201956). - scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (bsc#1201956 bsc#1200521). - scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1201956). - scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (bsc#1201956). - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1201956). - scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (bsc#1201956). - scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956). - scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (bsc#1201956). - scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (bsc#1201956). - scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (bsc#1201956). - scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956). - scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (bsc#1201958). - scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958). - scsi: qla2xxx: Fix imbalance vha->vref_count (bsc#1201958). - scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958). - scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1201958). - scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958). - scsi: qla2xxx: Update manufacturer details (bsc#1201958). - scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958). - scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958). - scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958). - watchdog: export lockup_detector_reconfigure (bsc#1201846 ltc#198761). - x86/bugs: Remove apostrophe typo (bsc#1178134). - x86/entry: Remove skip_r11rcx (bsc#1201644). - x86/retbleed: Add fine grained Kconfig knobs (bsc#1178134). - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (bsc#1201381).

Patchnames

SUSE-2022-2741,SUSE-SLE-Module-Public-Cloud-15-SP3-2022-2741,openSUSE-SLE-15.3-2022-2741

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940).\n- CVE-2022-29581: Fixed improper update of reference count in net/sched that could cause root privilege escalation (bnc#1199665).\n- CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598).\n- CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910).\n- CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs that could lead to a use-after-free (bnc#1201429).\n- CVE-2021-33655: Fixed an out of bounds write by ioctl cmd FBIOPUT_VSCREENINFO (bnc#1201635).\n- CVE-2021-33656: Fixed an out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636).\n- CVE-2022-21505: Fixed a kernel lockdown bypass via IMA policy (bsc#1201458).\n- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829).\n- CVE-2022-1116: Fixed an integer overflow vulnerability in io_uring which allowed a local attacker to escalate privileges to root (bnc#1199647).- CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251).\n- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).\n\nThe following non-security bugs were fixed:\n\n- Fixed a system crash related to the recent RETBLEED mitigation (bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676).\n- qla2xxx: drop patch which prevented nvme port discovery (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958).\n- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).\n- bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature (bsc#1199364).\n- bpf: enable BPF type format (BTF) (jsc#SLE-24559).\n- nfs: avoid NULL pointer dereference when there is unflushed data (bsc#1201196).\n- hv_netvsc: Add (more) validation for untrusted Hyper-V values (bsc#1199364).\n- hv_netvsc: Add comment of netvsc_xdp_xmit() (bsc#1199364).\n- hv_netvsc: Add support for XDP_REDIRECT (bsc#1199364).\n- hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer (bsc#1199364).\n- hv_netvsc: Fix validation in netvsc_linkstatus_callback() (bsc#1199364).\n- kvm/emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).\n- lkdtm: Disable return thunks in rodata.c (bsc#1178134).\n- net, xdp: Introduce __xdp_build_skb_from_frame utility routine (bsc#1199364).\n- net, xdp: Introduce xdp_build_skb_from_frame utility routine (bsc#1199364).\n- nvme: consider also host_iface when checking ip options (bsc#1199670).\n- powerpc/mobility: wait for memory transfer to complete (bsc#1201846 ltc#198761).\n- powerpc/pseries/mobility: set NMI watchdog factor during an LPM (bsc#1201846 ltc#198761).\n- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846 ltc#198761).\n- scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956).\n- scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (bsc#1201956).\n- scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (bsc#1201956 bsc#1200521).\n- scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1201956).\n- scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (bsc#1201956).\n- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1201956).\n- scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (bsc#1201956).\n- scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956).\n- scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (bsc#1201956).\n- scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (bsc#1201956).\n- scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (bsc#1201956).\n- scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956).\n- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (bsc#1201958).\n- scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958).\n- scsi: qla2xxx: Fix imbalance vha->vref_count (bsc#1201958).\n- scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958).\n- scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1201958).\n- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).\n- scsi: qla2xxx: Update manufacturer details (bsc#1201958).\n- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).\n- scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958).\n- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).\n- watchdog: export lockup_detector_reconfigure (bsc#1201846 ltc#198761).\n- x86/bugs: Remove apostrophe typo (bsc#1178134).\n- x86/entry: Remove skip_r11rcx (bsc#1201644).\n- x86/retbleed: Add fine grained Kconfig knobs (bsc#1178134).\n- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (bsc#1201381).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2022-2741,SUSE-SLE-Module-Public-Cloud-15-SP3-2022-2741,openSUSE-SLE-15.3-2022-2741",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_2741-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2022:2741-1",
            url: "https://www.suse.com/support/update/announcement/2022/suse-su-20222741-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2022:2741-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2022-August/011866.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178134",
            url: "https://bugzilla.suse.com/1178134",
         },
         {
            category: "self",
            summary: "SUSE Bug 1198829",
            url: "https://bugzilla.suse.com/1198829",
         },
         {
            category: "self",
            summary: "SUSE Bug 1199364",
            url: "https://bugzilla.suse.com/1199364",
         },
         {
            category: "self",
            summary: "SUSE Bug 1199647",
            url: "https://bugzilla.suse.com/1199647",
         },
         {
            category: "self",
            summary: "SUSE Bug 1199665",
            url: "https://bugzilla.suse.com/1199665",
         },
         {
            category: "self",
            summary: "SUSE Bug 1199670",
            url: "https://bugzilla.suse.com/1199670",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200521",
            url: "https://bugzilla.suse.com/1200521",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200598",
            url: "https://bugzilla.suse.com/1200598",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200644",
            url: "https://bugzilla.suse.com/1200644",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200651",
            url: "https://bugzilla.suse.com/1200651",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200762",
            url: "https://bugzilla.suse.com/1200762",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200910",
            url: "https://bugzilla.suse.com/1200910",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201196",
            url: "https://bugzilla.suse.com/1201196",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201206",
            url: "https://bugzilla.suse.com/1201206",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201251",
            url: "https://bugzilla.suse.com/1201251",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201381",
            url: "https://bugzilla.suse.com/1201381",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201429",
            url: "https://bugzilla.suse.com/1201429",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201458",
            url: "https://bugzilla.suse.com/1201458",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201635",
            url: "https://bugzilla.suse.com/1201635",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201636",
            url: "https://bugzilla.suse.com/1201636",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201644",
            url: "https://bugzilla.suse.com/1201644",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201664",
            url: "https://bugzilla.suse.com/1201664",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201672",
            url: "https://bugzilla.suse.com/1201672",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201673",
            url: "https://bugzilla.suse.com/1201673",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201676",
            url: "https://bugzilla.suse.com/1201676",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201846",
            url: "https://bugzilla.suse.com/1201846",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201930",
            url: "https://bugzilla.suse.com/1201930",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201940",
            url: "https://bugzilla.suse.com/1201940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201954",
            url: "https://bugzilla.suse.com/1201954",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201956",
            url: "https://bugzilla.suse.com/1201956",
         },
         {
            category: "self",
            summary: "SUSE Bug 1201958",
            url: "https://bugzilla.suse.com/1201958",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-36557 page",
            url: "https://www.suse.com/security/cve/CVE-2020-36557/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-36558 page",
            url: "https://www.suse.com/security/cve/CVE-2020-36558/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-33655 page",
            url: "https://www.suse.com/security/cve/CVE-2021-33655/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-33656 page",
            url: "https://www.suse.com/security/cve/CVE-2021-33656/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-1116 page",
            url: "https://www.suse.com/security/cve/CVE-2022-1116/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-1462 page",
            url: "https://www.suse.com/security/cve/CVE-2022-1462/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-20166 page",
            url: "https://www.suse.com/security/cve/CVE-2022-20166/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-21505 page",
            url: "https://www.suse.com/security/cve/CVE-2022-21505/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-2318 page",
            url: "https://www.suse.com/security/cve/CVE-2022-2318/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-26365 page",
            url: "https://www.suse.com/security/cve/CVE-2022-26365/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29581 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29581/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-32250 page",
            url: "https://www.suse.com/security/cve/CVE-2022-32250/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-33740 page",
            url: "https://www.suse.com/security/cve/CVE-2022-33740/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-33741 page",
            url: "https://www.suse.com/security/cve/CVE-2022-33741/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-33742 page",
            url: "https://www.suse.com/security/cve/CVE-2022-33742/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-36946 page",
            url: "https://www.suse.com/security/cve/CVE-2022-36946/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2022-08-10T07:23:06Z",
         generator: {
            date: "2022-08-10T07:23:06Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2022:2741-1",
         initial_release_date: "2022-08-10T07:23:06Z",
         revision_history: [
            {
               date: "2022-08-10T07:23:06Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                        product: {
                           name: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                           product_id: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                        product: {
                           name: "kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                           product_id: "kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kernel-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kernel-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        product: {
                           name: "reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                           product_id: "reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
                           product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-public-cloud:15:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.3",
                        product: {
                           name: "openSUSE Leap 15.3",
                           product_id: "openSUSE Leap 15.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.3",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-5.3.18-150300.38.75.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
            },
            product_reference: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-azure-5.3.18-150300.38.75.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
            },
            product_reference: "kernel-source-azure-5.3.18-150300.38.75.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-extra-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-optional-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
            },
            product_reference: "kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-azure-5.3.18-150300.38.75.1.noarch as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
            },
            product_reference: "kernel-source-azure-5.3.18-150300.38.75.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            },
            product_reference: "reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2020-36557",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-36557",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-36557",
               url: "https://www.suse.com/security/cve/CVE-2020-36557",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201429 for CVE-2020-36557",
               url: "https://bugzilla.suse.com/1201429",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201742 for CVE-2020-36557",
               url: "https://bugzilla.suse.com/1201742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202874 for CVE-2020-36557",
               url: "https://bugzilla.suse.com/1202874",
            },
            {
               category: "external",
               summary: "SUSE Bug 1205313 for CVE-2020-36557",
               url: "https://bugzilla.suse.com/1205313",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2020-36557",
      },
      {
         cve: "CVE-2020-36558",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-36558",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-36558",
               url: "https://www.suse.com/security/cve/CVE-2020-36558",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200910 for CVE-2020-36558",
               url: "https://bugzilla.suse.com/1200910",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201752 for CVE-2020-36558",
               url: "https://bugzilla.suse.com/1201752",
            },
            {
               category: "external",
               summary: "SUSE Bug 1205313 for CVE-2020-36558",
               url: "https://bugzilla.suse.com/1205313",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2020-36558",
      },
      {
         cve: "CVE-2021-33655",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-33655",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-33655",
               url: "https://www.suse.com/security/cve/CVE-2021-33655",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201635 for CVE-2021-33655",
               url: "https://bugzilla.suse.com/1201635",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202087 for CVE-2021-33655",
               url: "https://bugzilla.suse.com/1202087",
            },
            {
               category: "external",
               summary: "SUSE Bug 1205313 for CVE-2021-33655",
               url: "https://bugzilla.suse.com/1205313",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212291 for CVE-2021-33655",
               url: "https://bugzilla.suse.com/1212291",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2021-33655",
      },
      {
         cve: "CVE-2021-33656",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-33656",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-33656",
               url: "https://www.suse.com/security/cve/CVE-2021-33656",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201636 for CVE-2021-33656",
               url: "https://bugzilla.suse.com/1201636",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212286 for CVE-2021-33656",
               url: "https://bugzilla.suse.com/1212286",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-33656",
      },
      {
         cve: "CVE-2022-1116",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-1116",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-1116",
               url: "https://www.suse.com/security/cve/CVE-2022-1116",
            },
            {
               category: "external",
               summary: "SUSE Bug 1199647 for CVE-2022-1116",
               url: "https://bugzilla.suse.com/1199647",
            },
            {
               category: "external",
               summary: "SUSE Bug 1199648 for CVE-2022-1116",
               url: "https://bugzilla.suse.com/1199648",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209225 for CVE-2022-1116",
               url: "https://bugzilla.suse.com/1209225",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2022-1116",
      },
      {
         cve: "CVE-2022-1462",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-1462",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-1462",
               url: "https://www.suse.com/security/cve/CVE-2022-1462",
            },
            {
               category: "external",
               summary: "SUSE Bug 1198829 for CVE-2022-1462",
               url: "https://bugzilla.suse.com/1198829",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-1462",
      },
      {
         cve: "CVE-2022-20166",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-20166",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-20166",
               url: "https://www.suse.com/security/cve/CVE-2022-20166",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200598 for CVE-2022-20166",
               url: "https://bugzilla.suse.com/1200598",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212284 for CVE-2022-20166",
               url: "https://bugzilla.suse.com/1212284",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-20166",
      },
      {
         cve: "CVE-2022-21505",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-21505",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the linux kernel, if IMA appraisal is used with the \"ima_appraise=log\" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting \"ima_appraise=log\" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-21505",
               url: "https://www.suse.com/security/cve/CVE-2022-21505",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201458 for CVE-2022-21505",
               url: "https://bugzilla.suse.com/1201458",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-21505",
      },
      {
         cve: "CVE-2022-2318",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-2318",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-2318",
               url: "https://www.suse.com/security/cve/CVE-2022-2318",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201251 for CVE-2022-2318",
               url: "https://bugzilla.suse.com/1201251",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212303 for CVE-2022-2318",
               url: "https://bugzilla.suse.com/1212303",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-2318",
      },
      {
         cve: "CVE-2022-26365",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-26365",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-26365",
               url: "https://www.suse.com/security/cve/CVE-2022-26365",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200762 for CVE-2022-26365",
               url: "https://bugzilla.suse.com/1200762",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-26365",
      },
      {
         cve: "CVE-2022-29581",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29581",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29581",
               url: "https://www.suse.com/security/cve/CVE-2022-29581",
            },
            {
               category: "external",
               summary: "SUSE Bug 1199665 for CVE-2022-29581",
               url: "https://bugzilla.suse.com/1199665",
            },
            {
               category: "external",
               summary: "SUSE Bug 1199695 for CVE-2022-29581",
               url: "https://bugzilla.suse.com/1199695",
            },
            {
               category: "external",
               summary: "SUSE Bug 1205313 for CVE-2022-29581",
               url: "https://bugzilla.suse.com/1205313",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29581",
      },
      {
         cve: "CVE-2022-32250",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-32250",
            },
         ],
         notes: [
            {
               category: "general",
               text: "net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-32250",
               url: "https://www.suse.com/security/cve/CVE-2022-32250",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200015 for CVE-2022-32250",
               url: "https://bugzilla.suse.com/1200015",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200268 for CVE-2022-32250",
               url: "https://bugzilla.suse.com/1200268",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200494 for CVE-2022-32250",
               url: "https://bugzilla.suse.com/1200494",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202992 for CVE-2022-32250",
               url: "https://bugzilla.suse.com/1202992",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202993 for CVE-2022-32250",
               url: "https://bugzilla.suse.com/1202993",
            },
            {
               category: "external",
               summary: "SUSE Bug 1203002 for CVE-2022-32250",
               url: "https://bugzilla.suse.com/1203002",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2022-32250",
      },
      {
         cve: "CVE-2022-33740",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-33740",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-33740",
               url: "https://www.suse.com/security/cve/CVE-2022-33740",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200762 for CVE-2022-33740",
               url: "https://bugzilla.suse.com/1200762",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-33740",
      },
      {
         cve: "CVE-2022-33741",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-33741",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-33741",
               url: "https://www.suse.com/security/cve/CVE-2022-33741",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200762 for CVE-2022-33741",
               url: "https://bugzilla.suse.com/1200762",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-33741",
      },
      {
         cve: "CVE-2022-33742",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-33742",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-33742",
               url: "https://www.suse.com/security/cve/CVE-2022-33742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200762 for CVE-2022-33742",
               url: "https://bugzilla.suse.com/1200762",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-33742",
      },
      {
         cve: "CVE-2022-36946",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-36946",
            },
         ],
         notes: [
            {
               category: "general",
               text: "nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
               "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-36946",
               url: "https://www.suse.com/security/cve/CVE-2022-36946",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201940 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1201940",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201941 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1201941",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202312 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1202312",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202874 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1202874",
            },
            {
               category: "external",
               summary: "SUSE Bug 1203208 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1203208",
            },
            {
               category: "external",
               summary: "SUSE Bug 1204132 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1204132",
            },
            {
               category: "external",
               summary: "SUSE Bug 1205313 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1205313",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212310 for CVE-2022-36946",
               url: "https://bugzilla.suse.com/1212310",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch",
                  "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64",
                  "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-08-10T07:23:06Z",
               details: "important",
            },
         ],
         title: "CVE-2022-36946",
      },
   ],
}

cve-2022-33740

Vulnerability from cvelistv5

Published

2022-07-05 12:50

Modified

2024-08-03 08:09

Severity ?

Summary

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-403.txt	x_refsource_MISC
	http://xenbits.xen.org/xsa/advisory-403.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2022/07/05/6	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2022/dsa-5191	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

Linux

Xen

xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T08:09:22.628Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xenbits.xen.org/xsa/advisory-403.html",
               },
               {
                  name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
               },
               {
                  name: "FEDORA-2022-c4ec706488",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
               },
               {
                  name: "FEDORA-2022-2c9f8224f8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
               },
               {
                  name: "DSA-5191",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5191",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
            {
               product: "xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'The issue related to not zeroing memory areas used for shared communications\\nwas discovered by Roger Pau Monné of Citrix.\\n\\nThe issue related to leaking contiguous data in granted pages was disclosed\\npublicly.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-02T18:06:12",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xenbits.xen.org/xsa/advisory-403.html",
            },
            {
               name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
            },
            {
               name: "FEDORA-2022-c4ec706488",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
            },
            {
               name: "FEDORA-2022-2c9f8224f8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
            },
            {
               name: "DSA-5191",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5191",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2022-33740",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "xen",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Xen",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All Linux guests using PV devices are vulnerable in case potentially\nmalicious PV device backends are being used.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "The issue related to not zeroing memory areas used for shared communications\nwas discovered by Roger Pau Monné of Citrix.\n\nThe issue related to leaking contiguous data in granted pages was disclosed\npublicly.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                  },
                  {
                     name: "http://xenbits.xen.org/xsa/advisory-403.html",
                     refsource: "CONFIRM",
                     url: "http://xenbits.xen.org/xsa/advisory-403.html",
                  },
                  {
                     name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
                  },
                  {
                     name: "FEDORA-2022-c4ec706488",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
                  },
                  {
                     name: "FEDORA-2022-2c9f8224f8",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
                  },
                  {
                     name: "DSA-5191",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5191",
                  },
                  {
                     name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no mitigation available other than not using PV devices in case\na backend is suspected to be potentially malicious.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2022-33740",
      datePublished: "2022-07-05T12:50:30",
      dateReserved: "2022-06-15T00:00:00",
      dateUpdated: "2024-08-03T08:09:22.628Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-1116

Vulnerability from cvelistv5

Published

2022-05-17 16:50

Modified

2025-04-21 13:53

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.4.189&id=1a623d361ffe5cecd4244a02f449528416360038	x_refsource_MISC
	https://kernel.dance/#1a623d361ffe5cecd4244a02f449528416360038	x_refsource_MISC
	http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220629-0004/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Linux	Kernel	Version: unspecified < 5.4.189 Version: 5.4.24 < unspecified

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T23:55:23.656Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.4.189&id=1a623d361ffe5cecd4244a02f449528416360038",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://kernel.dance/#1a623d361ffe5cecd4244a02f449528416360038",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220629-0004/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2022-1116",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-21T13:40:14.058531Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-21T13:53:37.804Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kernel",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "5.4.189",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "unspecified",
                     status: "affected",
                     version: "5.4.24",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Bing-Jhong Billy Jheng <billy@starlabs.sg>",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "CWE-190 Integer Overflow or Wraparound",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-06-29T18:06:37.000Z",
            orgId: "14ed7db2-1595-443d-9d34-6215bf890778",
            shortName: "Google",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.4.189&id=1a623d361ffe5cecd4244a02f449528416360038",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://kernel.dance/#1a623d361ffe5cecd4244a02f449528416360038",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20220629-0004/",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@google.com",
               ID: "CVE-2022-1116",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "5.4.189",
                                       },
                                       {
                                          version_affected: ">=",
                                          version_value: "5.4.24",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            credit: [
               {
                  lang: "eng",
                  value: "Bing-Jhong Billy Jheng <billy@starlabs.sg>",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions.",
                  },
               ],
            },
            generator: {
               engine: "Vulnogram 0.0.9",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-190 Integer Overflow or Wraparound",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.4.189&id=1a623d361ffe5cecd4244a02f449528416360038",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.4.189&id=1a623d361ffe5cecd4244a02f449528416360038",
                  },
                  {
                     name: "https://kernel.dance/#1a623d361ffe5cecd4244a02f449528416360038",
                     refsource: "MISC",
                     url: "https://kernel.dance/#1a623d361ffe5cecd4244a02f449528416360038",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20220629-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20220629-0004/",
                  },
               ],
            },
            source: {
               discovery: "EXTERNAL",
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "14ed7db2-1595-443d-9d34-6215bf890778",
      assignerShortName: "Google",
      cveId: "CVE-2022-1116",
      datePublished: "2022-05-17T16:50:11.000Z",
      dateReserved: "2022-03-28T00:00:00.000Z",
      dateUpdated: "2025-04-21T13:53:37.804Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-33655

Vulnerability from cvelistv5

Published

2022-07-18 14:45

Modified

2024-08-03 23:58

Severity ?

Summary

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/07/19/2	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5191	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	kernel	Version: 5.18 5.19.0-rc1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T23:58:22.899Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4",
               },
               {
                  name: "[oss-security] 20220719 CVE-2021-33655: Linux kernel: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.(5.18 5.19.0-rc1)",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/19/2",
               },
               {
                  name: "DSA-5191",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5191",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "5.18 5.19.0-rc1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-787",
                     description: "CWE-787: Out-of-bounds Write",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-02T18:06:20",
            orgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
            shortName: "openEuler",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4",
            },
            {
               name: "[oss-security] 20220719 CVE-2021-33655: Linux kernel: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.(5.18 5.19.0-rc1)",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/19/2",
            },
            {
               name: "DSA-5191",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5191",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "securities@openeuler.org",
               ID: "CVE-2021-33655",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "5.18 5.19.0-rc1",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-787: Out-of-bounds Write",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4",
                  },
                  {
                     name: "[oss-security] 20220719 CVE-2021-33655: Linux kernel: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.(5.18 5.19.0-rc1)",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/19/2",
                  },
                  {
                     name: "DSA-5191",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5191",
                  },
                  {
                     name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
      assignerShortName: "openEuler",
      cveId: "CVE-2021-33655",
      datePublished: "2022-07-18T14:45:50",
      dateReserved: "2021-05-28T00:00:00",
      dateUpdated: "2024-08-03T23:58:22.899Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-2318

Vulnerability from cvelistv5

Published

2022-07-06 00:00

Modified

2024-08-03 00:32

Severity ?

Summary

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

References

▼	URL	Tags
	https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6
	https://www.debian.org/security/2022/dsa-5191	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list
	https://security.netapp.com/advisory/ntap-20230120-0001/

Impacted products

	Vendor	Product	Version
	n/a	Kernel	Version: Linux Kernel version prior to kernel 5.19 rc5

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T00:32:09.627Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
               },
               {
                  name: "DSA-5191",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5191",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230120-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Linux Kernel version prior to kernel 5.19 rc5",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-416",
                     description: "CWE-416",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-01-20T00:00:00",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               url: "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
            },
            {
               name: "DSA-5191",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2022/dsa-5191",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230120-0001/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2022-2318",
      datePublished: "2022-07-06T00:00:00",
      dateReserved: "2022-07-05T00:00:00",
      dateUpdated: "2024-08-03T00:32:09.627Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-33741

Vulnerability from cvelistv5

Published

2022-07-05 12:50

Modified

2024-08-03 08:09

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-403.txt	x_refsource_MISC
	http://xenbits.xen.org/xsa/advisory-403.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2022/07/05/6	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2022/dsa-5191	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

Linux

Xen

xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T08:09:22.659Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xenbits.xen.org/xsa/advisory-403.html",
               },
               {
                  name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
               },
               {
                  name: "FEDORA-2022-c4ec706488",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
               },
               {
                  name: "FEDORA-2022-2c9f8224f8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
               },
               {
                  name: "DSA-5191",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5191",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
            {
               product: "xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'The issue related to not zeroing memory areas used for shared communications\\nwas discovered by Roger Pau Monné of Citrix.\\n\\nThe issue related to leaking contiguous data in granted pages was disclosed\\npublicly.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-02T18:06:06",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xenbits.xen.org/xsa/advisory-403.html",
            },
            {
               name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
            },
            {
               name: "FEDORA-2022-c4ec706488",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
            },
            {
               name: "FEDORA-2022-2c9f8224f8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
            },
            {
               name: "DSA-5191",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5191",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2022-33741",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "xen",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Xen",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All Linux guests using PV devices are vulnerable in case potentially\nmalicious PV device backends are being used.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "The issue related to not zeroing memory areas used for shared communications\nwas discovered by Roger Pau Monné of Citrix.\n\nThe issue related to leaking contiguous data in granted pages was disclosed\npublicly.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                  },
                  {
                     name: "http://xenbits.xen.org/xsa/advisory-403.html",
                     refsource: "CONFIRM",
                     url: "http://xenbits.xen.org/xsa/advisory-403.html",
                  },
                  {
                     name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
                  },
                  {
                     name: "FEDORA-2022-c4ec706488",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
                  },
                  {
                     name: "FEDORA-2022-2c9f8224f8",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
                  },
                  {
                     name: "DSA-5191",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5191",
                  },
                  {
                     name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no mitigation available other than not using PV devices in case\na backend is suspected to be potentially malicious.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2022-33741",
      datePublished: "2022-07-05T12:50:33",
      dateReserved: "2022-06-15T00:00:00",
      dateUpdated: "2024-08-03T08:09:22.659Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-36558

Vulnerability from cvelistv5

Published

2022-07-21 03:46

Modified

2024-08-04 17:30

Severity ?

Summary

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb	x_refsource_MISC
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T17:30:08.247Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-21T03:46:33",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-36558",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb",
                  },
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-36558",
      datePublished: "2022-07-21T03:46:33",
      dateReserved: "2022-07-21T00:00:00",
      dateUpdated: "2024-08-04T17:30:08.247Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-20166

Vulnerability from cvelistv5

Published

2022-06-15 13:19

Modified

2024-08-03 02:02

Severity ?

Summary

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel

References

▼	URL	Tags
	https://source.android.com/security/bulletin/pixel/2022-06-01	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Android	Version: Android kernel

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T02:02:30.943Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/pixel/2022-06-01",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Android",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Android kernel",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Elevation of privilege",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-06-15T13:19:46",
            orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
            shortName: "google_android",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://source.android.com/security/bulletin/pixel/2022-06-01",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@android.com",
               ID: "CVE-2022-20166",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Android",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "Android kernel",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Elevation of privilege",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://source.android.com/security/bulletin/pixel/2022-06-01",
                     refsource: "MISC",
                     url: "https://source.android.com/security/bulletin/pixel/2022-06-01",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
      assignerShortName: "google_android",
      cveId: "CVE-2022-20166",
      datePublished: "2022-06-15T13:19:46",
      dateReserved: "2021-10-14T00:00:00",
      dateUpdated: "2024-08-03T02:02:30.943Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29581

Vulnerability from cvelistv5

Published

2022-05-17 16:50

Modified

2025-04-21 13:53

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8	x_refsource_MISC
	https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/05/18/2	mailing-list, x_refsource_MLIST
	http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220629-0005/	x_refsource_CONFIRM
	https://www.debian.org/security/2022/dsa-5173	vendor-advisory, x_refsource_DEBIAN
	http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Linux	Kernel	Version: unspecified < 5.18 Version: 4.14 < unspecified

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:26:06.284Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8",
               },
               {
                  name: "[oss-security] 20220518 CVE-2022-29581: Linux kernel cls_u32 UAF",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/05/18/2",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220629-0005/",
               },
               {
                  name: "DSA-5173",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5173",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2022-29581",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-21T13:39:49.364291Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-21T13:53:27.216Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kernel",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "5.18",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "unspecified",
                     status: "affected",
                     version: "4.14",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "syzbot <syzkaller@googlegroups.com>",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-911",
                     description: "CWE-911 Improper Update of Reference Count",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-08-30T16:06:25.000Z",
            orgId: "14ed7db2-1595-443d-9d34-6215bf890778",
            shortName: "Google",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8",
            },
            {
               name: "[oss-security] 20220518 CVE-2022-29581: Linux kernel cls_u32 UAF",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/05/18/2",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20220629-0005/",
            },
            {
               name: "DSA-5173",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5173",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@google.com",
               ID: "CVE-2022-29581",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "5.18",
                                       },
                                       {
                                          version_affected: ">=",
                                          version_value: "4.14",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                  ],
               },
            },
            credit: [
               {
                  lang: "eng",
                  value: "syzbot <syzkaller@googlegroups.com>",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.",
                  },
               ],
            },
            generator: {
               engine: "Vulnogram 0.0.9",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-911 Improper Update of Reference Count",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8",
                  },
                  {
                     name: "https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8",
                     refsource: "MISC",
                     url: "https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8",
                  },
                  {
                     name: "[oss-security] 20220518 CVE-2022-29581: Linux kernel cls_u32 UAF",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/05/18/2",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20220629-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20220629-0005/",
                  },
                  {
                     name: "DSA-5173",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5173",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html",
                  },
               ],
            },
            source: {
               discovery: "EXTERNAL",
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "14ed7db2-1595-443d-9d34-6215bf890778",
      assignerShortName: "Google",
      cveId: "CVE-2022-29581",
      datePublished: "2022-05-17T16:50:12.000Z",
      dateReserved: "2022-04-22T00:00:00.000Z",
      dateUpdated: "2025-04-21T13:53:27.216Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-33742

Vulnerability from cvelistv5

Published

2022-07-05 12:50

Modified

2024-08-03 08:09

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-403.txt	x_refsource_MISC
	http://xenbits.xen.org/xsa/advisory-403.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2022/07/05/6	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2022/dsa-5191	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

Linux

Xen

xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T08:09:22.683Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xenbits.xen.org/xsa/advisory-403.html",
               },
               {
                  name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
               },
               {
                  name: "FEDORA-2022-c4ec706488",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
               },
               {
                  name: "FEDORA-2022-2c9f8224f8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
               },
               {
                  name: "DSA-5191",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5191",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
            {
               product: "xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'The issue related to not zeroing memory areas used for shared communications\\nwas discovered by Roger Pau Monné of Citrix.\\n\\nThe issue related to leaking contiguous data in granted pages was disclosed\\npublicly.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-02T18:06:05",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xenbits.xen.org/xsa/advisory-403.html",
            },
            {
               name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
            },
            {
               name: "FEDORA-2022-c4ec706488",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
            },
            {
               name: "FEDORA-2022-2c9f8224f8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
            },
            {
               name: "DSA-5191",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5191",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2022-33742",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "xen",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Xen",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All Linux guests using PV devices are vulnerable in case potentially\nmalicious PV device backends are being used.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "The issue related to not zeroing memory areas used for shared communications\nwas discovered by Roger Pau Monné of Citrix.\n\nThe issue related to leaking contiguous data in granted pages was disclosed\npublicly.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                  },
                  {
                     name: "http://xenbits.xen.org/xsa/advisory-403.html",
                     refsource: "CONFIRM",
                     url: "http://xenbits.xen.org/xsa/advisory-403.html",
                  },
                  {
                     name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
                  },
                  {
                     name: "FEDORA-2022-c4ec706488",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
                  },
                  {
                     name: "FEDORA-2022-2c9f8224f8",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
                  },
                  {
                     name: "DSA-5191",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5191",
                  },
                  {
                     name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no mitigation available other than not using PV devices in case\na backend is suspected to be potentially malicious.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2022-33742",
      datePublished: "2022-07-05T12:50:39",
      dateReserved: "2022-06-15T00:00:00",
      dateUpdated: "2024-08-03T08:09:22.683Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-26365

Vulnerability from cvelistv5

Published

2022-07-05 12:50

Modified

2024-08-03 05:03

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-403.txt	x_refsource_MISC
	http://xenbits.xen.org/xsa/advisory-403.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2022/07/05/6	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2022/dsa-5191	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

Linux

Xen

xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T05:03:32.784Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xenbits.xen.org/xsa/advisory-403.html",
               },
               {
                  name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
               },
               {
                  name: "FEDORA-2022-c4ec706488",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
               },
               {
                  name: "FEDORA-2022-2c9f8224f8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
               },
               {
                  name: "DSA-5191",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5191",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux",
               vendor: "Linux",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
            {
               product: "xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-403",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "{'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'The issue related to not zeroing memory areas used for shared communications\\nwas discovered by Roger Pau Monné of Citrix.\\n\\nThe issue related to leaking contiguous data in granted pages was disclosed\\npublicly.'}]}}}",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     description: {
                        description_data: [
                           {
                              lang: "eng",
                              value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                           },
                        ],
                     },
                  },
                  type: "unknown",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "unknown",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-02T18:06:21",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xenbits.xen.org/xsa/advisory-403.html",
            },
            {
               name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
            },
            {
               name: "FEDORA-2022-c4ec706488",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
            },
            {
               name: "FEDORA-2022-2c9f8224f8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
            },
            {
               name: "DSA-5191",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5191",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@xen.org",
               ID: "CVE-2022-26365",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Linux",
                     },
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "xen",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "?",
                                          version_value: "consult Xen advisory XSA-403",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Xen",
                     },
                  ],
               },
            },
            configuration: {
               configuration_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "All Linux guests using PV devices are vulnerable in case potentially\nmalicious PV device backends are being used.",
                        },
                     ],
                  },
               },
            },
            credit: {
               credit_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "The issue related to not zeroing memory areas used for shared communications\nwas discovered by Roger Pau Monné of Citrix.\n\nThe issue related to leaking contiguous data in granted pages was disclosed\npublicly.",
                        },
                     ],
                  },
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).",
                  },
               ],
            },
            impact: {
               impact_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "An untrusted backend can access data not intended to be shared.  If such\nmappings are made with write permissions the backend could also cause\nmalfunctions and/or crashes to consumers of contiguous data in the shared\npages.",
                        },
                     ],
                  },
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "unknown",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                     refsource: "MISC",
                     url: "https://xenbits.xenproject.org/xsa/advisory-403.txt",
                  },
                  {
                     name: "http://xenbits.xen.org/xsa/advisory-403.html",
                     refsource: "CONFIRM",
                     url: "http://xenbits.xen.org/xsa/advisory-403.html",
                  },
                  {
                     name: "[oss-security] 20220705 Xen Security Advisory 403 v3 (CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742) - Linux disk/nic frontends data leaks",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/05/6",
                  },
                  {
                     name: "FEDORA-2022-c4ec706488",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/",
                  },
                  {
                     name: "FEDORA-2022-2c9f8224f8",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/",
                  },
                  {
                     name: "DSA-5191",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5191",
                  },
                  {
                     name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
                  },
               ],
            },
            workaround: {
               workaround_data: {
                  description: {
                     description_data: [
                        {
                           lang: "eng",
                           value: "There is no mitigation available other than not using PV devices in case\na backend is suspected to be potentially malicious.",
                        },
                     ],
                  },
               },
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2022-26365",
      datePublished: "2022-07-05T12:50:28",
      dateReserved: "2022-03-02T00:00:00",
      dateUpdated: "2024-08-03T05:03:32.784Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-33656

Vulnerability from cvelistv5

Published

2022-07-18 14:44

Modified

2024-08-03 23:58

Severity ?

Summary

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch	x_refsource_MISC
	https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/07/19/3	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	openEuler:kernel	Version: <5.10.127

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T23:58:21.558Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel",
               },
               {
                  name: "[oss-security] 20220719 CVE-2021-33656: Linux kernel: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.(<5.10.127)",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/19/3",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openEuler:kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "<5.10.127",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-787",
                     description: "CWE-787 Out-of-bounds Write",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-02T18:06:13",
            orgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
            shortName: "openEuler",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel",
            },
            {
               name: "[oss-security] 20220719 CVE-2021-33656: Linux kernel: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.(<5.10.127)",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/19/3",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "securities@openeuler.org",
               ID: "CVE-2021-33656",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openEuler:kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "<5.10.127",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-787 Out-of-bounds Write",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch",
                  },
                  {
                     name: "https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel",
                     refsource: "MISC",
                     url: "https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel",
                  },
                  {
                     name: "[oss-security] 20220719 CVE-2021-33656: Linux kernel: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.(<5.10.127)",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/19/3",
                  },
                  {
                     name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
      assignerShortName: "openEuler",
      cveId: "CVE-2021-33656",
      datePublished: "2022-07-18T14:44:28",
      dateReserved: "2021-05-28T00:00:00",
      dateUpdated: "2024-08-03T23:58:21.558Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-21505

Vulnerability from cvelistv5

Published

2024-12-24 18:48

Modified

2024-12-27 16:52

Severity ?

6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

References

▼	URL	Tags
	https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b	issue-tracking
	https://linux.oracle.com/cve/CVE-2022-21505.html	vendor-advisory

Impacted products

	Vendor	Product	Version
	Oracle Corporation	Oracle Linux	Version: Oracle Linux: 7 Version: Oracle Linux: 8 Version: Oracle Linux: 9

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2022-21505",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-27T16:51:57.672286Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-346",
                        description: "CWE-346 Origin Validation Error",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-27T16:52:05.331Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Oracle Linux",
               vendor: "Oracle Corporation",
               versions: [
                  {
                     status: "affected",
                     version: "Oracle Linux: 7",
                  },
                  {
                     status: "affected",
                     version: "Oracle Linux: 8",
                  },
                  {
                     status: "affected",
                     version: "Oracle Linux: 9",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the linux kernel, if IMA appraisal is used with the \"ima_appraise=log\" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting \"ima_appraise=log\" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "In the linux kernel, if IMA appraisal is used with the \"ima_appraise=log\" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting \"ima_appraise=log\" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-24T18:48:23.588Z",
            orgId: "43595867-4340-4103-b7a2-9a5208d29a85",
            shortName: "oracle",
         },
         references: [
            {
               name: "Github commit",
               tags: [
                  "issue-tracking",
               ],
               url: "https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b",
            },
            {
               name: "Oracle Advisory",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://linux.oracle.com/cve/CVE-2022-21505.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "43595867-4340-4103-b7a2-9a5208d29a85",
      assignerShortName: "oracle",
      cveId: "CVE-2022-21505",
      datePublished: "2024-12-24T18:48:23.588Z",
      dateReserved: "2021-11-15T19:29:08.891Z",
      dateUpdated: "2024-12-27T16:52:05.331Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-32250

Vulnerability from cvelistv5

Published

2022-06-02 20:51

Modified

2024-08-03 07:39

Severity ?

Summary

net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

References

▼	URL	Tags
	https://www.openwall.com/lists/oss-security/2022/05/31/1	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/06/03/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/06/04/1	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/	x_refsource_MISC
	https://www.debian.org/security/2022/dsa-5161	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=2092427	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/06/20/1	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/07/03/6	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/07/03/5	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5173	vendor-advisory, x_refsource_DEBIAN
	https://security.netapp.com/advisory/ntap-20220715-0005/	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2022/08/25/1	mailing-list, x_refsource_MLIST
	https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/	x_refsource_MISC
	https://github.com/theori-io/CVE-2022-32250-exploit	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/09/02/9	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T07:39:50.446Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2022/05/31/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd",
               },
               {
                  name: "[oss-security] 20220603 Re: Linux Kernel use-after-free write in netfilter",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/06/03/1",
               },
               {
                  name: "[oss-security] 20220604 Re: Linux Kernel use-after-free write in netfilter",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/06/04/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5161",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2092427",
               },
               {
                  name: "[oss-security] 20220620 Re: Linux Kernel use-after-free write in netfilter",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/06/20/1",
               },
               {
                  name: "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html",
               },
               {
                  name: "[oss-security] 20220703 Re: Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/03/6",
               },
               {
                  name: "[oss-security] 20220703 Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/07/03/5",
               },
               {
                  name: "DSA-5173",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5173",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220715-0005/",
               },
               {
                  name: "[oss-security] 20220825 Re: Linux Kernel use-after-free write in netfilter",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/25/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/theori-io/CVE-2022-32250-exploit",
               },
               {
                  name: "[oss-security] 20220902 Re: Linux Kernel use-after-free write in netfilter",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/09/02/9",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-02T11:06:21",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2022/05/31/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd",
            },
            {
               name: "[oss-security] 20220603 Re: Linux Kernel use-after-free write in netfilter",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/06/03/1",
            },
            {
               name: "[oss-security] 20220604 Re: Linux Kernel use-after-free write in netfilter",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/06/04/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.debian.org/security/2022/dsa-5161",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2092427",
            },
            {
               name: "[oss-security] 20220620 Re: Linux Kernel use-after-free write in netfilter",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/06/20/1",
            },
            {
               name: "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html",
            },
            {
               name: "[oss-security] 20220703 Re: Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/03/6",
            },
            {
               name: "[oss-security] 20220703 Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/07/03/5",
            },
            {
               name: "DSA-5173",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2022/dsa-5173",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20220715-0005/",
            },
            {
               name: "[oss-security] 20220825 Re: Linux Kernel use-after-free write in netfilter",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/25/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/theori-io/CVE-2022-32250-exploit",
            },
            {
               name: "[oss-security] 20220902 Re: Linux Kernel use-after-free write in netfilter",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/09/02/9",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2022-32250",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.openwall.com/lists/oss-security/2022/05/31/1",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2022/05/31/1",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd",
                  },
                  {
                     name: "[oss-security] 20220603 Re: Linux Kernel use-after-free write in netfilter",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/06/03/1",
                  },
                  {
                     name: "[oss-security] 20220604 Re: Linux Kernel use-after-free write in netfilter",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/06/04/1",
                  },
                  {
                     name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/",
                     refsource: "MISC",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/",
                  },
                  {
                     name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/",
                     refsource: "MISC",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/",
                  },
                  {
                     name: "https://www.debian.org/security/2022/dsa-5161",
                     refsource: "MISC",
                     url: "https://www.debian.org/security/2022/dsa-5161",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=2092427",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=2092427",
                  },
                  {
                     name: "[oss-security] 20220620 Re: Linux Kernel use-after-free write in netfilter",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/06/20/1",
                  },
                  {
                     name: "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html",
                  },
                  {
                     name: "[oss-security] 20220703 Re: Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/03/6",
                  },
                  {
                     name: "[oss-security] 20220703 Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/07/03/5",
                  },
                  {
                     name: "DSA-5173",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2022/dsa-5173",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20220715-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20220715-0005/",
                  },
                  {
                     name: "[oss-security] 20220825 Re: Linux Kernel use-after-free write in netfilter",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/25/1",
                  },
                  {
                     name: "https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/",
                     refsource: "MISC",
                     url: "https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/",
                  },
                  {
                     name: "https://github.com/theori-io/CVE-2022-32250-exploit",
                     refsource: "MISC",
                     url: "https://github.com/theori-io/CVE-2022-32250-exploit",
                  },
                  {
                     name: "[oss-security] 20220902 Re: Linux Kernel use-after-free write in netfilter",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/09/02/9",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2022-32250",
      datePublished: "2022-06-02T20:51:34",
      dateReserved: "2022-06-02T00:00:00",
      dateUpdated: "2024-08-03T07:39:50.446Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-1462

Vulnerability from cvelistv5

Published

2022-05-31 00:00

Modified

2024-08-03 00:03

Severity ?

Summary

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=2078466
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list
	https://seclists.org/oss-sec/2022/q2/155

Impacted products

	Vendor	Product	Version
	n/a	kernel	Version: no information yet

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T00:03:06.282Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2078466",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://seclists.org/oss-sec/2022/q2/155",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "no information yet",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-362",
                     description: "CWE-362",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-17T00:00:00",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2078466",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
            {
               url: "https://seclists.org/oss-sec/2022/q2/155",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2022-1462",
      datePublished: "2022-05-31T00:00:00",
      dateReserved: "2022-04-25T00:00:00",
      dateUpdated: "2024-08-03T00:03:06.282Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-36557

Vulnerability from cvelistv5

Published

2022-07-21 03:46

Modified

2024-08-04 17:30

Severity ?

Summary

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220	x_refsource_MISC
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T17:30:08.357Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-21T03:46:49",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-36557",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220",
                  },
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-36557",
      datePublished: "2022-07-21T03:46:49",
      dateReserved: "2022-07-21T00:00:00",
      dateUpdated: "2024-08-04T17:30:08.357Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-36946

Vulnerability from cvelistv5

Published

2022-07-27 00:00

Modified

2025-05-05 16:13

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

References

▼	URL	Tags
	https://marc.info/?l=netfilter-devel&m=165883202007292&w=2
	https://www.debian.org/security/2022/dsa-5207	vendor-advisory
	https://security.netapp.com/advisory/ntap-20220901-0007/
	https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html	mailing-list
	https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99a63d36cb3ed5ca3aa6fcb64cffbeaf3b0fb164

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T10:21:32.314Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://marc.info/?l=netfilter-devel&m=165883202007292&w=2",
               },
               {
                  name: "DSA-5207",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2022/dsa-5207",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220901-0007/",
               },
               {
                  name: "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html",
               },
               {
                  name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99a63d36cb3ed5ca3aa6fcb64cffbeaf3b0fb164",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 7.5,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "NONE",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-36946",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-23T13:27:06.847869Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        description: "CWE-noinfo Not enough information",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-05-05T16:13:27.647Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-03-25T00:40:11.457Z",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://marc.info/?l=netfilter-devel&m=165883202007292&w=2",
            },
            {
               name: "DSA-5207",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2022/dsa-5207",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20220901-0007/",
            },
            {
               name: "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html",
            },
            {
               name: "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html",
            },
            {
               url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99a63d36cb3ed5ca3aa6fcb64cffbeaf3b0fb164",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2022-36946",
      datePublished: "2022-07-27T00:00:00.000Z",
      dateReserved: "2022-07-27T00:00:00.000Z",
      dateUpdated: "2025-05-05T16:13:27.647Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature