{
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2021-46941",
         ],
         details: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: core: Do core softreset when switch mode\n\n\nAccording to the programming guide, to switch mode for DRD controller,\nthe driver needs to do the following.\n\nTo switch from device to host:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(host mode)\n3. Reset the host with USBCMD.HCRESET\n4. Then follow up with the initializing host registers sequence\n\nTo switch from host to device:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(device mode)\n3. Reset the device with DCTL.CSftRst\n4. Then follow up with the initializing registers sequence\n\nCurrently we're missing step 1) to do GCTL.CoreSoftReset and step 3) of\nswitching from host to device. John Stult reported a lockup issue seen\nwith HiKey960 platform without these steps[1]. Similar issue is observed\nwith Ferry's testing platform[2].\n\nSo, apply the required steps along with some fixes to Yu Chen's and John\nStultz's version. The main fixes to their versions are the missing wait\nfor clocks synchronization before clearing GCTL.CoreSoftReset and only\napply DCTL.CSftRst when switching from host to device.\n\n[1] https://lore.kernel.org/linux-usb/20210108015115.27920-1-john.stultz@linaro.org/\n[2] https://lore.kernel.org/linux-usb/0ba7a6ba-e6a7-9cd4-0695-64fc927e01f1@gmail.com/",
         id: "GSD-2021-46941",
         modified: "2024-02-26T06:03:52.480923Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "cve@kernel.org",
            ID: "CVE-2021-46941",
            STATE: "PUBLIC",
         },
         affects: {
            vendor: {
               vendor_data: [
                  {
                     product: {
                        product_data: [
                           {
                              product_name: "Linux",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "41ce1456e1db",
                                       version_value: "fce7bbcd07d5",
                                    },
                                    {
                                       version_value: "not down converted",
                                       x_cve_json_5_version_data: {
                                          defaultStatus: "affected",
                                          versions: [
                                             {
                                                status: "affected",
                                                version: "4.12",
                                             },
                                             {
                                                lessThan: "4.12",
                                                status: "unaffected",
                                                version: "0",
                                                versionType: "custom",
                                             },
                                             {
                                                lessThanOrEqual: "5.10.*",
                                                status: "unaffected",
                                                version: "5.10.36",
                                                versionType: "custom",
                                             },
                                             {
                                                lessThanOrEqual: "5.11.*",
                                                status: "unaffected",
                                                version: "5.11.20",
                                                versionType: "custom",
                                             },
                                             {
                                                lessThanOrEqual: "5.12.*",
                                                status: "unaffected",
                                                version: "5.12.3",
                                                versionType: "custom",
                                             },
                                             {
                                                lessThanOrEqual: "*",
                                                status: "unaffected",
                                                version: "5.13",
                                                versionType: "original_commit_for_fix",
                                             },
                                          ],
                                       },
                                    },
                                 ],
                              },
                           },
                        ],
                     },
                     vendor_name: "Linux",
                  },
               ],
            },
         },
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: core: Do core softreset when switch mode\n\n\nAccording to the programming guide, to switch mode for DRD controller,\nthe driver needs to do the following.\n\nTo switch from device to host:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(host mode)\n3. Reset the host with USBCMD.HCRESET\n4. Then follow up with the initializing host registers sequence\n\nTo switch from host to device:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(device mode)\n3. Reset the device with DCTL.CSftRst\n4. Then follow up with the initializing registers sequence\n\nCurrently we're missing step 1) to do GCTL.CoreSoftReset and step 3) of\nswitching from host to device. John Stult reported a lockup issue seen\nwith HiKey960 platform without these steps[1]. Similar issue is observed\nwith Ferry's testing platform[2].\n\nSo, apply the required steps along with some fixes to Yu Chen's and John\nStultz's version. The main fixes to their versions are the missing wait\nfor clocks synchronization before clearing GCTL.CoreSoftReset and only\napply DCTL.CSftRst when switching from host to device.\n\n[1] https://lore.kernel.org/linux-usb/20210108015115.27920-1-john.stultz@linaro.org/\n[2] https://lore.kernel.org/linux-usb/0ba7a6ba-e6a7-9cd4-0695-64fc927e01f1@gmail.com/",
               },
            ],
         },
         generator: {
            engine: "bippy-b01c2a820106",
         },
         problemtype: {
            problemtype_data: [
               {
                  description: [
                     {
                        lang: "eng",
                        value: "n/a",
                     },
                  ],
               },
            ],
         },
         references: {
            reference_data: [
               {
                  name: "https://git.kernel.org/stable/c/fce7bbcd07d59ac30dba8ce225316b3b4c1c7b50",
                  refsource: "MISC",
                  url: "https://git.kernel.org/stable/c/fce7bbcd07d59ac30dba8ce225316b3b4c1c7b50",
               },
               {
                  name: "https://git.kernel.org/stable/c/800f58217626c8b147aa40660e572ed8a0d56e3b",
                  refsource: "MISC",
                  url: "https://git.kernel.org/stable/c/800f58217626c8b147aa40660e572ed8a0d56e3b",
               },
               {
                  name: "https://git.kernel.org/stable/c/1c10fd60c8595ea7ff7e29d3cf1fa88069941da3",
                  refsource: "MISC",
                  url: "https://git.kernel.org/stable/c/1c10fd60c8595ea7ff7e29d3cf1fa88069941da3",
               },
               {
                  name: "https://git.kernel.org/stable/c/f88359e1588b85cf0e8209ab7d6620085f3441d9",
                  refsource: "MISC",
                  url: "https://git.kernel.org/stable/c/f88359e1588b85cf0e8209ab7d6620085f3441d9",
               },
            ],
         },
      },
      "nvd.nist.gov": {
         cve: {
            configurations: [
               {
                  nodes: [
                     {
                        cpeMatch: [
                           {
                              criteria: "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                              matchCriteriaId: "2467C736-2ED6-4BF9-AB1F-D95FFB0AB0A0",
                              versionEndExcluding: "5.10.36",
                              versionStartIncluding: "4.12.0",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                              matchCriteriaId: "EFB425F0-C28C-4B44-8B4C-AD512AA832DE",
                              versionEndExcluding: "5.11.20",
                              versionStartIncluding: "5.11.0",
                              vulnerable: true,
                           },
                           {
                              criteria: "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                              matchCriteriaId: "C3814FA3-8141-4313-A852-8C4212BE12AD",
                              versionEndExcluding: "5.12.3",
                              versionStartIncluding: "5.12.0",
                              vulnerable: true,
                           },
                        ],
                        negate: false,
                        operator: "OR",
                     },
                  ],
               },
            ],
            descriptions: [
               {
                  lang: "en",
                  value: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: core: Do core softreset when switch mode\n\n\nAccording to the programming guide, to switch mode for DRD controller,\nthe driver needs to do the following.\n\nTo switch from device to host:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(host mode)\n3. Reset the host with USBCMD.HCRESET\n4. Then follow up with the initializing host registers sequence\n\nTo switch from host to device:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(device mode)\n3. Reset the device with DCTL.CSftRst\n4. Then follow up with the initializing registers sequence\n\nCurrently we're missing step 1) to do GCTL.CoreSoftReset and step 3) of\nswitching from host to device. John Stult reported a lockup issue seen\nwith HiKey960 platform without these steps[1]. Similar issue is observed\nwith Ferry's testing platform[2].\n\nSo, apply the required steps along with some fixes to Yu Chen's and John\nStultz's version. The main fixes to their versions are the missing wait\nfor clocks synchronization before clearing GCTL.CoreSoftReset and only\napply DCTL.CSftRst when switching from host to device.\n\n[1] https://lore.kernel.org/linux-usb/20210108015115.27920-1-john.stultz@linaro.org/\n[2] https://lore.kernel.org/linux-usb/0ba7a6ba-e6a7-9cd4-0695-64fc927e01f1@gmail.com/",
               },
               {
                  lang: "es",
                  value: "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: dwc3: core: Realiza un reinicio suave del núcleo al cambiar de modo Según la guía de programación, para cambiar el modo del controlador DRD, el controlador debe hacer lo siguiente. Para cambiar de dispositivo a host: 1. Reinicie el controlador con GCTL.CoreSoftReset 2. Configure GCTL.PrtCapDir (modo de host) 3. Reinicie el host con USBCMD.HCRESET 4. Luego siga con la secuencia de inicialización de registros del host Para cambiar de host a dispositivo: 1. Reinicie el controlador con GCTL.CoreSoftReset 2. Configure GCTL.PrtCapDir (modo de dispositivo) 3. Reinicie el dispositivo con DCTL.CSftRst 4. Luego siga con la secuencia de inicialización de registros Actualmente nos falta el paso 1) para hacer GCTL .CoreSoftReset y paso 3) de cambio de host a dispositivo. John Stult informó un problema de bloqueo observado con la plataforma HiKey960 sin estos pasos[1]. Se observa un problema similar con la plataforma de pruebas de Ferry[2]. Entonces, aplique los pasos requeridos junto con algunas correcciones a la versión de Yu Chen y John Stultz. Las principales correcciones a sus versiones son la falta de espera para la sincronización de los relojes antes de borrar GCTL.CoreSoftReset y solo aplicar DCTL.CSftRst al cambiar de host a dispositivo. [1] https://lore.kernel.org/linux-usb/20210108015115.27920-1-john.stultz@linaro.org/ [2] https://lore.kernel.org/linux-usb/0ba7a6ba-e6a7- 9cd4-0695-64fc927e01f1@gmail.com/",
               },
            ],
            id: "CVE-2021-46941",
            lastModified: "2024-04-10T19:42:17.610",
            metrics: {
               cvssMetricV31: [
                  {
                     cvssData: {
                        attackComplexity: "LOW",
                        attackVector: "LOCAL",
                        availabilityImpact: "HIGH",
                        baseScore: 5.5,
                        baseSeverity: "MEDIUM",
                        confidentialityImpact: "NONE",
                        integrityImpact: "NONE",
                        privilegesRequired: "LOW",
                        scope: "UNCHANGED",
                        userInteraction: "NONE",
                        vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        version: "3.1",
                     },
                     exploitabilityScore: 1.8,
                     impactScore: 3.6,
                     source: "nvd@nist.gov",
                     type: "Primary",
                  },
               ],
            },
            published: "2024-02-27T19:04:05.970",
            references: [
               {
                  source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                  tags: [
                     "Patch",
                  ],
                  url: "https://git.kernel.org/stable/c/1c10fd60c8595ea7ff7e29d3cf1fa88069941da3",
               },
               {
                  source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                  tags: [
                     "Patch",
                  ],
                  url: "https://git.kernel.org/stable/c/800f58217626c8b147aa40660e572ed8a0d56e3b",
               },
               {
                  source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                  tags: [
                     "Patch",
                  ],
                  url: "https://git.kernel.org/stable/c/f88359e1588b85cf0e8209ab7d6620085f3441d9",
               },
               {
                  source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                  tags: [
                     "Patch",
                  ],
                  url: "https://git.kernel.org/stable/c/fce7bbcd07d59ac30dba8ce225316b3b4c1c7b50",
               },
            ],
            sourceIdentifier: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            vulnStatus: "Analyzed",
            weaknesses: [
               {
                  description: [
                     {
                        lang: "en",
                        value: "NVD-CWE-noinfo",
                     },
                  ],
                  source: "nvd@nist.gov",
                  type: "Primary",
               },
            ],
         },
      },
   },
}

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThe SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).\n- CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).\n- CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).\n- CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).\n- CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).\n- CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).\n- CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).\n- CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).\n- CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).\n- CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).\n- CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand()  (bsc#1220536).\n- CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).\n- CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).\n- CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).\n- CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).\n- CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).\n- CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).\n- CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).\n- CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).\n- CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).\n- CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).\n- CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).\n- CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).\n- CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).\n- CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).\n- CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).\n- CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure _after_  sync'ing SRCU (bsc#1220745).\n- CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).\n- CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).\n- CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).\n- CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).\n- CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).\n- CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).\n- CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).\n- CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).\n- CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).\n- CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).\n- CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548).\n- CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575).\n- CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605).\n- CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608).\n- CVE-2021-47138: Fixed an out-of-bound memory access during clearing filters in cxgb4 (bsc#1221934).\n- CVE-2021-47141: Fixed a null pointer dereference on priv->msix_vectors when driver is unloaded in gve (bsc#1221949).\n- CVE-2021-47142: Fixed an use-after-free on ttm->sg in drm/amdgpu (bsc#1221952).\n- CVE-2021-47143: Fixed possible corruption in net/smc after failed device_add() (bsc#1221988).\n- CVE-2021-47149: Fixed a potential null pointer deref in fmvj18x_get_hwinfo() (bsc#1221972).\n- CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973).\n- CVE-2021-47153: Fixed wrongly generated interrupt on bus reset in i2c/i801 (bsc#1221969).\n- CVE-2021-47161: Fixed a resource leak in an error handling path in the error handling path of the probe function in spi spi-fsl-dspi (bsc#1221966).\n- CVE-2021-47162: Fixed a possible memory leak in tipc_buf_append (bsc#1221977).\n- CVE-2021-47165: Fixed shutdown crash when component not probed in drm/meson (bsc#1221965).\n- CVE-2021-47166: Fixed a data corruption of pg_bytes_written in nfs_do_recoalesce() in nfs (bsc#1221998).\n- CVE-2021-47167: Fixed an oopsable condition in __nfs_pageio_add_request() in nfs (bsc#1221991).\n- CVE-2021-47168: Fixed an incorrect limit in filelayout_decode_layout() in nfs (bsc#1222002).\n- CVE-2021-47169: Fixed a NULL pointer dereference in rp2_probe in serial rp2 (bsc#1222000).\n- CVE-2021-47171: Fixed a memory leak in smsc75xx_bind in net usb (bsc#1221994).\n- CVE-2021-47173: Fixed a memory leak in uss720_probe in misc/uss720 (bsc#1221993).\n- CVE-2021-47177: Fixed a sysfs leak in alloc_iommu() in iommu/vt-d (bsc#1221997).\n- CVE-2021-47179: Fixed a NULL pointer dereference in pnfs_mark_matching_lsegs_return() in nfsv4 (bsc#1222001).\n- CVE-2021-47180: Fixed a memory leak in nci_allocate_device nfcmrvl_disconnect in nfc nci (bsc#1221999).\n- CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource()  (bsc#1222660).\n- CVE-2021-47182: Fixed scsi_mode_sense() buffer length handling (bsc#1222662).\n- CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).\n- CVE-2021-47184: Fixed NULL pointer dereference on VSI filter sync (bsc#1222666).\n- CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).\n- CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).\n- CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions in thermal (bsc#1222878)\n- CVE-2021-47205: Unregistered clocks/resets when unbinding in sunxi-ng (bsc#1222888).\n- CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).\n- CVE-2021-47211: Fixed a null pointer dereference on pointer cs_desc in usb-audio (bsc#1222869).\n- CVE-2022-0487: Fixed use-after-free in moxart_remove in moxart-mmc (bsc#1194516).\n- CVE-2022-48619: Fixed a denial-of-service issue in drivers/input/input.c (bsc#1218220).\n- CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).\n- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).\n- CVE-2022-48701: Fixed an out-of-bounds bug in __snd_usb_parse_audio_interface() (bsc#1223921).\n- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).\n- CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).\n- CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).\n- CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).\n- CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).\n- CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).\n- CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).\n- CVE-2023-52486: Fixed possible use-after-free in drm (bsc#1221277).\n- CVE-2023-52488: Fixed serial/sc16is7xx convert from _raw_ to _noinc_ regmap functions for FIFO (bsc#1221162).\n- CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).\n- CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).\n- CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).\n- CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).\n- CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).\n- CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058).\n- CVE-2023-52587: Fixed mcast list locking in IB/ipoib (bsc#1221082).\n- CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).\n- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).\n- CVE-2023-52595: Fixed possible deadlock in wifi/rt2x00 (bsc#1221046).\n- CVE-2023-52598: Fixed wrong setting of fpc register in s390/ptrace (bsc#1221060).\n- CVE-2023-52607: Fixed a null-pointer-dereference in pgtable_cache_add kasprintf() (bsc#1221061).\n- CVE-2023-52614: Fixed PM/devfreq buffer overflow in trans_stat_show (bsc#1221617).\n- CVE-2023-52620: Fixed netfilter/nf_tables to disallow timeout for anonymous sets never used from userspace (bsc#1221825).\n- CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).\n- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).\n- CVE-2023-52639: Fixed race during shadow creation in KVM/s390/vsie Fixed (bsc#1222300).\n- CVE-2023-52644: Stop/wake correct queue in DMA Tx path when QoS is disabled in b43 (bsc#1222961).\n- CVE-2023-52650: Added missing check for of_find_device_by_node() (bsc#1223770)\n- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).\n- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).\n- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).\n- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).\n- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).\n- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).\n- CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).\n- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).\n- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).\n- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).\n- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).\n- CVE-2024-24855: Fixed a null pointer dereference due to race condition in scsi device driver in lpfc_unregister_fcf_rescan() function (bsc#1219618).\n- CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).\n- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).\n- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).\n- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).\n- CVE-2024-26675: Fixed ppp_async to limit MRU to 64K (bsc#1222379).\n- CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).\n- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).\n- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).\n- CVE-2024-26743: Fixed memory leak in qedr_create_user_qp error flow in rdma/qedr (bsc#1222677)\n- CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449)\n- CVE-2024-26747: Fixed a NULL pointer issue with USB parent module's reference (bsc#1222609).\n- CVE-2024-26754: Fixed an use-after-free and null-ptr-deref in gtp_genl_dump_pdp() in gtp  (bsc#1222632).\n- CVE-2024-26763: Fixed user corruption via by writing data with O_DIRECT on device in dm-crypt (bsc#1222720).\n- CVE-2024-26771: Fixed a null pointer dereference on edma_probe in dmaengine ti edma  (bsc#1222610)\n- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).\n- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).\n- CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)\n- CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)\n- CVE-2024-26779: Fixed a race condition on enabling fast-xmit in mac80211 (bsc#1222772).\n- CVE-2024-26793: Fixed an use-after-free and null-ptr-deref in gtp_newlink() in gtp  (bsc#1222428).\n- CVE-2024-26805: Fixed a kernel-infoleak-after-free in __skb_datagram_iter in netlink  (bsc#1222630).\n- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).\n- CVE-2024-26817: Fixed amdkfd to use calloc instead of kzalloc to avoid integer overflow (bsc#1222812).\n- CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)\n- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).\n- CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).\n- CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).\n- CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).\n- CVE-2024-26859: Prevent access to a freed page in page_pool in bnx2x (bsc#1223049).\n- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).\n- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).\n- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).\n- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).\n- CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).\n- CVE-2024-26922: Validated the parameters of bo mapping operations more clearly (bsc#1223315).\n- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).\n- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).\n- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).\n- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).\n- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).\n- CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).\n- CVE-2024-27072: Removed useless locks in usbtv_video_free() (bsc#1223837).\n- CVE-2024-27073: Fixed a memory leak in budget_av_attach() (bsc#1223843).\n- CVE-2024-27074: Fixed a memory leak in go7007_load_encoder() (bsc#1223844).\n- CVE-2024-27075: Avoided stack overflow warnings with clang (bsc#1223842).\n- CVE-2024-27078: Fixed a memory leak in tpg_alloc() (bsc#1223781).\n\nThe following non-security bugs were fixed:\n\n- Input: adxl34x - do not hardcode interrupt trigger type (git-fixes).\n- Input: drv260x - sleep between polling GO bit (git-fixes).\n- Input: ipaq-micro-keys - add error handling for devm_kmemdup.\n- Input: xpad - add PXN V900 support.\n- USB: core: Fix deadlock in usb_deauthorize_interface().\n- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (git-fixes).\n- atl1c: fix error return code in atl1c_probe() (git-fixes).\n- atl1e: fix error return code in atl1e_probe() (git-fixes).\n- bluetooth: btqca: Fixed a coding style error (git-fixes).\n- bluetooth: btqca: Introduce HCI_EV_VENDOR and use it (git-fixes).\n- bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).\n- bluetooth: hci_intel: Add check for platform_driver_register (git-fixes).\n- bnx2x: Fix enabling network interfaces without VFs (git-fixes).\n- bnx2x: Fix missing error code in bnx2x_iov_init_one() (git-fixes).\n- bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t (git-fixes).\n- doc/README.SUSE: Update information about module support status (jsc#PED-5759)\n- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (git-fixes).\n- ethernet: myri10ge: Fix missing error code in myri10ge_probe() (git-fixes).\n- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (git-fixes).\n- fuse: do not unhash root (bsc#1223954).\n- iommu/amd: Increase interrupt remapping table limit to 512 entries (git-fixes).\n- iommu/amd: Mark interrupt as managed (git-fixes).\n- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (git-fixes).\n- iommu/amd: Silence warnings under memory pressure (git-fixes).\n- iommu: Check if group is NULL before remove device (git-fixes).\n- kabi fix for pNFS: Fix the pnfs block driver's calculation of layoutget size (git-fixes).\n- kabi: PCI: Add locking to RMW PCI Express Capability Register accessors (kabi).\n- lan78xx: Add missing return code checks (git-fixes).\n- lan78xx: Add support to dump lan78xx registers (git-fixes).\n- lan78xx: Do not access skb_queue_head list pointers directly (git-fixes).\n- lan78xx: Fix exception on link speed change (git-fixes).\n- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).\n- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).\n- lan78xx: Fix white space and style issues (git-fixes).\n- lan78xx: Modify error messages (git-fixes).\n- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (git-fixes).\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (git-fixes).\n- net: Fix features skip in for_each_netdev_feature() (git-fixes).\n- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (git-fixes).\n- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).\n- net: lan78xx: Allow for VLAN headers in timeout calcs (git-fixes).\n- net: lan78xx: Make declaration style consistent (git-fixes).\n- net: lan78xx: Merge memcpy + lexx_to_cpus to get_unaligned_lexx (git-fixes).\n- net: lan78xx: fix runtime PM count underflow on link stop (git-fixes).\n- net: lan78xx: remove set but not used variable 'event' (git-fixes).\n- net: macb: ensure the device is available before accessing GEMGXL control registers (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (git-fixes).\n- net: usb: Use ARRAY_SIZE instead of calculating the array size (git-fixes).\n- net: usb: lan78xx: Remove lots of set but unused 'ret' variables (git-fixes).\n- nfs: Fix O_DIRECT commit verifier handling (git-fixes).\n- nfs: Fix O_DIRECT locking issues (git-fixes).\n- nfs: Fix a request reference leak in nfs_direct_write_clear_reqs() (git-fixes).\n- nfs: Fix an off by one in root_nfs_cat() (git-fixes).\n- nfs: Fix direct WRITE throughput regression (git-fixes).\n- nfs: Fix error handling for O_DIRECT write scheduling (git-fixes).\n- nfs: More O_DIRECT accounting fixes for error paths (git-fixes).\n- nfs: add atomic_open for NFSv3 to handle O_TRUNC correctly (bsc#1219847).\n- nfs: avoid spurious warning of lost lock that is being unlocked (bsc#1221791).\n- nfs: commit errors should be fatal (git-fixes).\n- nfs: only issue commit in DIO codepath if we have uncommitted data (git-fixes).\n- nfsd: Fix error cleanup path in nfsd_rename() (git-fixes).\n- nfsd: Reset cb_seq_status after NFS4ERR_DELAY (git-fixes).\n- nfsd: Retransmit callbacks after client reconnects (git-fixes).\n- nfsd: lock_rename() needs both directories to live on the same fs (git-fixes).\n- nfsv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (git-fixes).\n- pci/aer: Clear MULTI_ERR_COR/UNCOR_RCV bits (git-fixes).\n- pci/aspm: Avoid link retraining race (git-fixes).\n- pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes).\n- pci/aspm: Do not warn if already in common clock mode (git-fixes).\n- pci/aspm: Factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: Reduce severity of common clock config message (git-fixes).\n- pci/aspm: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- pci/aspm: Use RMW accessors for changing LNKCTL (git-fixes).\n- pci/dpc: Print all TLP Prefixes, not just the first (git-fixes).\n- pci/iov: Enlarge virtfn sysfs name buffer (git-fixes).\n- pci/msi: Prevent MSI hardware interrupt number truncation (git-fixes).\n- pci/pm: Power up all devices during runtime resume (git-fixes).\n- pci/sysfs: Protect driver's D3cold preference from user space (git-fixes).\n- pci: Add ACS quirk for Broadcom BCM5750x NICs (git-fixes).\n- pci: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).\n- pci: Add locking to RMW PCI Express Capability Register accessors (git-fixes).\n- pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes).\n- pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes).\n- pci: Make link retraining use RMW accessors for changing LNKCTL (git-fixes).\n- pci: Mark 3ware-9650SE Root Port Extended Tags as broken (git-fixes).\n- pci: Rework pcie_retrain_link() wait loop (git-fixes).\n- pci: aardvark: Fix setting MSI address (git-fixes).\n- pci: aardvark: Fix support for MSI interrupts (git-fixes).\n- pci: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (git-fixes).\n- pci: endpoint: Do not stop controller when unbinding endpoint function (git-fixes).\n- pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes).\n- pci: pciehp: Add pciehp_set_indicators() to set both indicators (git-fixes).\n- pci: pciehp: Cancel bringup sequence if card is not present (git-fixes).\n- pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).\n- pci: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes).\n- pci: qcom: Fix unbalanced PHY init on probe errors (git-fixes).\n- pci: qcom: Use DWC helpers for modifying the read-only DBI registers (git-fixes).\n- pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes).\n- pnfs/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats (git-fixes).\n- pnfs: Fix the pnfs block driver's calculation of layoutget size (git-fixes).\n- rdma/ipoib: Fix error code return in ipoib_mcast_join (bsc#1221082)\n- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223883).\n- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223885).\n- s390/vtime: fix average steal time calculation (git-fixes bsc#1221953).\n- scsi: qla2xxx: Change debug message during driver unload (bsc1221816).\n- scsi: qla2xxx: Delay I/O Abort on PCI error (bsc1221816).\n- scsi: qla2xxx: Fix N2N stuck connection (bsc1221816).\n- scsi: qla2xxx: Fix command flush on cable pull (bsc1221816).\n- scsi: qla2xxx: Fix double free of fcport (bsc1221816).\n- scsi: qla2xxx: Fix double free of the ha->vp_map pointer (bsc1221816).\n- scsi: qla2xxx: NVME|FCP prefer flag not being honored (bsc1221816).\n- scsi: qla2xxx: Prevent command send on chip reset (bsc1221816).\n- scsi: qla2xxx: Split FCE|EFT trace control (bsc1221816).\n- scsi: qla2xxx: Update manufacturer detail (bsc1221816).\n- scsi: qla2xxx: Update version to 10.02.09.200-k (bsc1221816).\n- sr9800: Add check for usbnet_get_endpoints (git-fixes).\n- sunrpc: Fix RPC client cleaned up the freed pipefs dentries (git-fixes).\n- sunrpc: fix a memleak in gss_import_v2_context (git-fixes).\n- sunrpc: fix some memleaks in gssx_dec_option_array (git-fixes).\n- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).\n- tun: honor IOCB_NOWAIT flag (git-fixes).\n- usb: dwc2: Fix memory leak in dwc2_hcd_init.\n- usb: dwc2: check return value after calling platform_get_resource() (git-fixes).\n- usb: dwc3: gadget: Ignore EP queue requests during bus reset (git-fixes).\n- usb: gadget: Fix issue with config_ep_by_speed function (git-fixes).\n- usb: mon: Fix atomicity violation in mon_bin_vma_fault (git-fixes).\n- usb: musb: Modify the 'HWVers' register address (git-fixes).\n- usb: roles: do not get/set_role() when usb_role_switch is unregistered.\n- usb: serial: option: add Fibocom L7xx modules (git-fixes).\n- usb: serial: option: do not claim interface 4 for ZTE MF290 (git-fixes).\n- usb: storage: set 1.50 as the lower bcdDevice for older 'Super Top' compatibility (git-fixes).\n- usb: typec: class: fix typec_altmode_put_partner to put plugs (git-fixes).\n- usb: usbfs: Do not WARN about excessively large memory allocations.\n- x86/CPU/AMD: Update the Zenbleed microcode revisions (git-fixes).\n- x86/bugs: Fix the SRSO mitigation on Zen3/4 (git-fixes).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2024-1646,SUSE-SLE-RT-12-SP5-2024-1646",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1646-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2024:1646-1",
            url: "https://www.suse.com/support/update/announcement/2024/suse-su-20241646-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2024:1646-1",
            url: "https://lists.suse.com/pipermail/sle-updates/2024-May/035261.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1141539",
            url: "https://bugzilla.suse.com/1141539",
         },
         {
            category: "self",
            summary: "SUSE Bug 1190317",
            url: "https://bugzilla.suse.com/1190317",
         },
         {
            category: "self",
            summary: "SUSE Bug 1190576",
            url: "https://bugzilla.suse.com/1190576",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192145",
            url: "https://bugzilla.suse.com/1192145",
         },
         {
            category: "self",
            summary: "SUSE Bug 1194516",
            url: "https://bugzilla.suse.com/1194516",
         },
         {
            category: "self",
            summary: "SUSE Bug 1203935",
            url: "https://bugzilla.suse.com/1203935",
         },
         {
            category: "self",
            summary: "SUSE Bug 1209657",
            url: "https://bugzilla.suse.com/1209657",
         },
         {
            category: "self",
            summary: "SUSE Bug 1211592",
            url: "https://bugzilla.suse.com/1211592",
         },
         {
            category: "self",
            summary: "SUSE Bug 1217339",
            url: "https://bugzilla.suse.com/1217339",
         },
         {
            category: "self",
            summary: "SUSE Bug 1217987",
            url: "https://bugzilla.suse.com/1217987",
         },
         {
            category: "self",
            summary: "SUSE Bug 1217988",
            url: "https://bugzilla.suse.com/1217988",
         },
         {
            category: "self",
            summary: "SUSE Bug 1217989",
            url: "https://bugzilla.suse.com/1217989",
         },
         {
            category: "self",
            summary: "SUSE Bug 1218220",
            url: "https://bugzilla.suse.com/1218220",
         },
         {
            category: "self",
            summary: "SUSE Bug 1218336",
            url: "https://bugzilla.suse.com/1218336",
         },
         {
            category: "self",
            summary: "SUSE Bug 1218479",
            url: "https://bugzilla.suse.com/1218479",
         },
         {
            category: "self",
            summary: "SUSE Bug 1218562",
            url: "https://bugzilla.suse.com/1218562",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219104",
            url: "https://bugzilla.suse.com/1219104",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219169",
            url: "https://bugzilla.suse.com/1219169",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219170",
            url: "https://bugzilla.suse.com/1219170",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219618",
            url: "https://bugzilla.suse.com/1219618",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219623",
            url: "https://bugzilla.suse.com/1219623",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219847",
            url: "https://bugzilla.suse.com/1219847",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220320",
            url: "https://bugzilla.suse.com/1220320",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220366",
            url: "https://bugzilla.suse.com/1220366",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220394",
            url: "https://bugzilla.suse.com/1220394",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220411",
            url: "https://bugzilla.suse.com/1220411",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220413",
            url: "https://bugzilla.suse.com/1220413",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220416",
            url: "https://bugzilla.suse.com/1220416",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220418",
            url: "https://bugzilla.suse.com/1220418",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220442",
            url: "https://bugzilla.suse.com/1220442",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220445",
            url: "https://bugzilla.suse.com/1220445",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220521",
            url: "https://bugzilla.suse.com/1220521",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220528",
            url: "https://bugzilla.suse.com/1220528",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220536",
            url: "https://bugzilla.suse.com/1220536",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220538",
            url: "https://bugzilla.suse.com/1220538",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220554",
            url: "https://bugzilla.suse.com/1220554",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220572",
            url: "https://bugzilla.suse.com/1220572",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220580",
            url: "https://bugzilla.suse.com/1220580",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220611",
            url: "https://bugzilla.suse.com/1220611",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220625",
            url: "https://bugzilla.suse.com/1220625",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220628",
            url: "https://bugzilla.suse.com/1220628",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220637",
            url: "https://bugzilla.suse.com/1220637",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220640",
            url: "https://bugzilla.suse.com/1220640",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220662",
            url: "https://bugzilla.suse.com/1220662",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220687",
            url: "https://bugzilla.suse.com/1220687",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220692",
            url: "https://bugzilla.suse.com/1220692",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220703",
            url: "https://bugzilla.suse.com/1220703",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220706",
            url: "https://bugzilla.suse.com/1220706",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220739",
            url: "https://bugzilla.suse.com/1220739",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220742",
            url: "https://bugzilla.suse.com/1220742",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220743",
            url: "https://bugzilla.suse.com/1220743",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220745",
            url: "https://bugzilla.suse.com/1220745",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220751",
            url: "https://bugzilla.suse.com/1220751",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220768",
            url: "https://bugzilla.suse.com/1220768",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220769",
            url: "https://bugzilla.suse.com/1220769",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220777",
            url: "https://bugzilla.suse.com/1220777",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220790",
            url: "https://bugzilla.suse.com/1220790",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220794",
            url: "https://bugzilla.suse.com/1220794",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220829",
            url: "https://bugzilla.suse.com/1220829",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220836",
            url: "https://bugzilla.suse.com/1220836",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220843",
            url: "https://bugzilla.suse.com/1220843",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220846",
            url: "https://bugzilla.suse.com/1220846",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220850",
            url: "https://bugzilla.suse.com/1220850",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220871",
            url: "https://bugzilla.suse.com/1220871",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220927",
            url: "https://bugzilla.suse.com/1220927",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220960",
            url: "https://bugzilla.suse.com/1220960",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220985",
            url: "https://bugzilla.suse.com/1220985",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220987",
            url: "https://bugzilla.suse.com/1220987",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221044",
            url: "https://bugzilla.suse.com/1221044",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221046",
            url: "https://bugzilla.suse.com/1221046",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221048",
            url: "https://bugzilla.suse.com/1221048",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221058",
            url: "https://bugzilla.suse.com/1221058",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221060",
            url: "https://bugzilla.suse.com/1221060",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221061",
            url: "https://bugzilla.suse.com/1221061",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221077",
            url: "https://bugzilla.suse.com/1221077",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221082",
            url: "https://bugzilla.suse.com/1221082",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221088",
            url: "https://bugzilla.suse.com/1221088",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221162",
            url: "https://bugzilla.suse.com/1221162",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221277",
            url: "https://bugzilla.suse.com/1221277",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221293",
            url: "https://bugzilla.suse.com/1221293",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221337",
            url: "https://bugzilla.suse.com/1221337",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221532",
            url: "https://bugzilla.suse.com/1221532",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221541",
            url: "https://bugzilla.suse.com/1221541",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221548",
            url: "https://bugzilla.suse.com/1221548",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221575",
            url: "https://bugzilla.suse.com/1221575",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221605",
            url: "https://bugzilla.suse.com/1221605",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221608",
            url: "https://bugzilla.suse.com/1221608",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221617",
            url: "https://bugzilla.suse.com/1221617",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221791",
            url: "https://bugzilla.suse.com/1221791",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221816",
            url: "https://bugzilla.suse.com/1221816",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221825",
            url: "https://bugzilla.suse.com/1221825",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221830",
            url: "https://bugzilla.suse.com/1221830",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221862",
            url: "https://bugzilla.suse.com/1221862",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221934",
            url: "https://bugzilla.suse.com/1221934",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221949",
            url: "https://bugzilla.suse.com/1221949",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221952",
            url: "https://bugzilla.suse.com/1221952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221953",
            url: "https://bugzilla.suse.com/1221953",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221965",
            url: "https://bugzilla.suse.com/1221965",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221966",
            url: "https://bugzilla.suse.com/1221966",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221967",
            url: "https://bugzilla.suse.com/1221967",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221969",
            url: "https://bugzilla.suse.com/1221969",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221972",
            url: "https://bugzilla.suse.com/1221972",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221973",
            url: "https://bugzilla.suse.com/1221973",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221977",
            url: "https://bugzilla.suse.com/1221977",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221979",
            url: "https://bugzilla.suse.com/1221979",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221988",
            url: "https://bugzilla.suse.com/1221988",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221991",
            url: "https://bugzilla.suse.com/1221991",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221993",
            url: "https://bugzilla.suse.com/1221993",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221994",
            url: "https://bugzilla.suse.com/1221994",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221997",
            url: "https://bugzilla.suse.com/1221997",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221998",
            url: "https://bugzilla.suse.com/1221998",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221999",
            url: "https://bugzilla.suse.com/1221999",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222000",
            url: "https://bugzilla.suse.com/1222000",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222001",
            url: "https://bugzilla.suse.com/1222001",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222002",
            url: "https://bugzilla.suse.com/1222002",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222117",
            url: "https://bugzilla.suse.com/1222117",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222294",
            url: "https://bugzilla.suse.com/1222294",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222300",
            url: "https://bugzilla.suse.com/1222300",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222357",
            url: "https://bugzilla.suse.com/1222357",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222379",
            url: "https://bugzilla.suse.com/1222379",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222422",
            url: "https://bugzilla.suse.com/1222422",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222428",
            url: "https://bugzilla.suse.com/1222428",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222449",
            url: "https://bugzilla.suse.com/1222449",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222503",
            url: "https://bugzilla.suse.com/1222503",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222559",
            url: "https://bugzilla.suse.com/1222559",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222585",
            url: "https://bugzilla.suse.com/1222585",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222609",
            url: "https://bugzilla.suse.com/1222609",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222610",
            url: "https://bugzilla.suse.com/1222610",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222613",
            url: "https://bugzilla.suse.com/1222613",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222618",
            url: "https://bugzilla.suse.com/1222618",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222619",
            url: "https://bugzilla.suse.com/1222619",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222624",
            url: "https://bugzilla.suse.com/1222624",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222630",
            url: "https://bugzilla.suse.com/1222630",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222632",
            url: "https://bugzilla.suse.com/1222632",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222660",
            url: "https://bugzilla.suse.com/1222660",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222662",
            url: "https://bugzilla.suse.com/1222662",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222664",
            url: "https://bugzilla.suse.com/1222664",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222666",
            url: "https://bugzilla.suse.com/1222666",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222669",
            url: "https://bugzilla.suse.com/1222669",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222671",
            url: "https://bugzilla.suse.com/1222671",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222677",
            url: "https://bugzilla.suse.com/1222677",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222706",
            url: "https://bugzilla.suse.com/1222706",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222720",
            url: "https://bugzilla.suse.com/1222720",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222765",
            url: "https://bugzilla.suse.com/1222765",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222770",
            url: "https://bugzilla.suse.com/1222770",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222772",
            url: "https://bugzilla.suse.com/1222772",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222787",
            url: "https://bugzilla.suse.com/1222787",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222790",
            url: "https://bugzilla.suse.com/1222790",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222812",
            url: "https://bugzilla.suse.com/1222812",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222836",
            url: "https://bugzilla.suse.com/1222836",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222869",
            url: "https://bugzilla.suse.com/1222869",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222876",
            url: "https://bugzilla.suse.com/1222876",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222878",
            url: "https://bugzilla.suse.com/1222878",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222881",
            url: "https://bugzilla.suse.com/1222881",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222883",
            url: "https://bugzilla.suse.com/1222883",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222888",
            url: "https://bugzilla.suse.com/1222888",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222961",
            url: "https://bugzilla.suse.com/1222961",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222975",
            url: "https://bugzilla.suse.com/1222975",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222976",
            url: "https://bugzilla.suse.com/1222976",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223016",
            url: "https://bugzilla.suse.com/1223016",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223035",
            url: "https://bugzilla.suse.com/1223035",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223049",
            url: "https://bugzilla.suse.com/1223049",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223051",
            url: "https://bugzilla.suse.com/1223051",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223057",
            url: "https://bugzilla.suse.com/1223057",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223058",
            url: "https://bugzilla.suse.com/1223058",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223060",
            url: "https://bugzilla.suse.com/1223060",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223187",
            url: "https://bugzilla.suse.com/1223187",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223189",
            url: "https://bugzilla.suse.com/1223189",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223198",
            url: "https://bugzilla.suse.com/1223198",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223203",
            url: "https://bugzilla.suse.com/1223203",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223315",
            url: "https://bugzilla.suse.com/1223315",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223432",
            url: "https://bugzilla.suse.com/1223432",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223509",
            url: "https://bugzilla.suse.com/1223509",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223512",
            url: "https://bugzilla.suse.com/1223512",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223513",
            url: "https://bugzilla.suse.com/1223513",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223516",
            url: "https://bugzilla.suse.com/1223516",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223518",
            url: "https://bugzilla.suse.com/1223518",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223626",
            url: "https://bugzilla.suse.com/1223626",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223627",
            url: "https://bugzilla.suse.com/1223627",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223664",
            url: "https://bugzilla.suse.com/1223664",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223686",
            url: "https://bugzilla.suse.com/1223686",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223693",
            url: "https://bugzilla.suse.com/1223693",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223712",
            url: "https://bugzilla.suse.com/1223712",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223715",
            url: "https://bugzilla.suse.com/1223715",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223735",
            url: "https://bugzilla.suse.com/1223735",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223744",
            url: "https://bugzilla.suse.com/1223744",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223745",
            url: "https://bugzilla.suse.com/1223745",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223770",
            url: "https://bugzilla.suse.com/1223770",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223781",
            url: "https://bugzilla.suse.com/1223781",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223819",
            url: "https://bugzilla.suse.com/1223819",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223824",
            url: "https://bugzilla.suse.com/1223824",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223827",
            url: "https://bugzilla.suse.com/1223827",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223837",
            url: "https://bugzilla.suse.com/1223837",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223842",
            url: "https://bugzilla.suse.com/1223842",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223843",
            url: "https://bugzilla.suse.com/1223843",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223844",
            url: "https://bugzilla.suse.com/1223844",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223883",
            url: "https://bugzilla.suse.com/1223883",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223885",
            url: "https://bugzilla.suse.com/1223885",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223921",
            url: "https://bugzilla.suse.com/1223921",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223941",
            url: "https://bugzilla.suse.com/1223941",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223952",
            url: "https://bugzilla.suse.com/1223952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223953",
            url: "https://bugzilla.suse.com/1223953",
         },
         {
            category: "self",
            summary: "SUSE Bug 1223954",
            url: "https://bugzilla.suse.com/1223954",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-25160 page",
            url: "https://www.suse.com/security/cve/CVE-2019-25160/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46904 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46904/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46905 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46905/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46909 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46909/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46938 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46938/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46939 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46939/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46941 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46941/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46950 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46950/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46958 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46958/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46960 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46960/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46963 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46963/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46964 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46964/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46966 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46966/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46981 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46981/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46988 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46988/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46990 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46990/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-46998 page",
            url: "https://www.suse.com/security/cve/CVE-2021-46998/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47006 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47006/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47015 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47015/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47024 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47024/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47034 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47034/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47045 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47045/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47049 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47049/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47055 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47055/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47056 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47056/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47060 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47060/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47061 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47061/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47063 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47063/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47068 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47068/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47070 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47070/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47071 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47071/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47073 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47073/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47100 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47100/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47101 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47101/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47104 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47104/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47110 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47110/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47112 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47112/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47114 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47114/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47117 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47117/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47118 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47118/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47119 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47119/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47138 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47138/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47141 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47141/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47142 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47142/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47143 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47143/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47146 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47146/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47149 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47149/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47150 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47150/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47153 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47153/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47159 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47159/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47161 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47161/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47162 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47162/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47165 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47165/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47166 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47166/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47167 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47167/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47168 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47168/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47169 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47169/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47171 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47171/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47173 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47173/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47177 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47177/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47179 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47179/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47180 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47180/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47181 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47181/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47182 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47182/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47183 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47183/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47184 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47184/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47185 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47185/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47188 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47188/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47189 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47189/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47198 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47198/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47202 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47202/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47203 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47203/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47204 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47204/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47205 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47205/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47207 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47207/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47211 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47211/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47216 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47216/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-47217 page",
            url: "https://www.suse.com/security/cve/CVE-2021-47217/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-0487 page",
            url: "https://www.suse.com/security/cve/CVE-2022-0487/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48619 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48619/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48626 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48626/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48636 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48636/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48650 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48650/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48651 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48651/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48667 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48667/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48668 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48668/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48687 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48687/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48688 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48688/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48695 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48695/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-48701 page",
            url: "https://www.suse.com/security/cve/CVE-2022-48701/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-0160 page",
            url: "https://www.suse.com/security/cve/CVE-2023-0160/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52454 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52454/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52469 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52469/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52470 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52470/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52474 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52474/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52476 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52476/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52477 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52477/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52486 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52486/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52488 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52488/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52509 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52509/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52515 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52515/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52524 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52524/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52528 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52528/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52575 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52575/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52583 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52583/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52587 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52587/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52590 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52590/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52591 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52591/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52595 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52595/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52598 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52598/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52607 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52607/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52614 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52614/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52620 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52620/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52628 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52628/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52635 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52635/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52639 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52639/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52644 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52644/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52646 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52646/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52650 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52650/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52652 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52652/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52653 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52653/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-6270 page",
            url: "https://www.suse.com/security/cve/CVE-2023-6270/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-6356 page",
            url: "https://www.suse.com/security/cve/CVE-2023-6356/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-6535 page",
            url: "https://www.suse.com/security/cve/CVE-2023-6535/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-6536 page",
            url: "https://www.suse.com/security/cve/CVE-2023-6536/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-7042 page",
            url: "https://www.suse.com/security/cve/CVE-2023-7042/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-7192 page",
            url: "https://www.suse.com/security/cve/CVE-2023-7192/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-2201 page",
            url: "https://www.suse.com/security/cve/CVE-2024-2201/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-22099 page",
            url: "https://www.suse.com/security/cve/CVE-2024-22099/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-23307 page",
            url: "https://www.suse.com/security/cve/CVE-2024-23307/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-23848 page",
            url: "https://www.suse.com/security/cve/CVE-2024-23848/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-24855 page",
            url: "https://www.suse.com/security/cve/CVE-2024-24855/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-24861 page",
            url: "https://www.suse.com/security/cve/CVE-2024-24861/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26614 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26614/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26642 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26642/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26651 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26651/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26671 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26671/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26675 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26675/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26689 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26689/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26704 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26704/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26733 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26733/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26739 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26739/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26743 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26743/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26744 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26744/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26747 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26747/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26754 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26754/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26763 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26763/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26771 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26771/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26772 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26772/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26773 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26773/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26777 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26777/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26778 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26778/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26779 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26779/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26793 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26793/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26805 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26805/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26816 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26816/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26817 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26817/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26839 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26839/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26840 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26840/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26852 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26852/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26855 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26855/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26857 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26857/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26859 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26859/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26878 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26878/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26883 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26883/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26884 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26884/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26898 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26898/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26901 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26901/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26903 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26903/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26907 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26907/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26922 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26922/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26929 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26929/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26930 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26930/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26931 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26931/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26948 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26948/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26993 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26993/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27013 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27013/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27014 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27014/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27043 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27043/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27046 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27046/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27054 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27054/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27072 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27072/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27073 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27073/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27074 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27074/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27075 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27075/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27078 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27078/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-27388 page",
            url: "https://www.suse.com/security/cve/CVE-2024-27388/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2024-05-14T14:30:34Z",
         generator: {
            date: "2024-05-14T14:30:34Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2024:1646-1",
         initial_release_date: "2024-05-14T14:30:34Z",
         revision_history: [
            {
               date: "2024-05-14T14:30:34Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-rt-4.12.14-10.182.1.noarch",
                        product: {
                           name: "kernel-devel-rt-4.12.14-10.182.1.noarch",
                           product_id: "kernel-devel-rt-4.12.14-10.182.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-rt-4.12.14-10.182.1.noarch",
                        product: {
                           name: "kernel-source-rt-4.12.14-10.182.1.noarch",
                           product_id: "kernel-source-rt-4.12.14-10.182.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                           product_id: "cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                           product_id: "cluster-md-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                           product_id: "dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "dlm-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                           product_id: "dlm-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                           product_id: "gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "gfs2-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                           product_id: "gfs2-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-base-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt-base-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt-base-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-devel-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt-devel-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt-devel-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-extra-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt-extra-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt-extra-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-kgraft-devel-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt-kgraft-devel-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt-kgraft-devel-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt_debug-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-base-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-base-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt_debug-base-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-extra-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-extra-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt_debug-extra-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-kgraft-devel-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-kgraft-devel-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-rt_debug-kgraft-devel-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kernel-syms-rt-4.12.14-10.182.1.x86_64",
                           product_id: "kernel-syms-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kselftests-kmp-rt-4.12.14-10.182.1.x86_64",
                           product_id: "kselftests-kmp-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "kselftests-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                           product_id: "kselftests-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                           product_id: "ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                           product_id: "ocfs2-kmp-rt_debug-4.12.14-10.182.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Real Time 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Real Time 12 SP5",
                           product_id: "SUSE Linux Enterprise Real Time 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-linux-enterprise-rt:12:sp5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-rt-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
            },
            product_reference: "cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-rt-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
            },
            product_reference: "dlm-kmp-rt-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-rt-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            },
            product_reference: "gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-rt-4.12.14-10.182.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
            },
            product_reference: "kernel-devel-rt-4.12.14-10.182.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
            },
            product_reference: "kernel-rt-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-base-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
            },
            product_reference: "kernel-rt-base-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-devel-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
            },
            product_reference: "kernel-rt-devel-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
            },
            product_reference: "kernel-rt_debug-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-devel-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
            },
            product_reference: "kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-rt-4.12.14-10.182.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
            },
            product_reference: "kernel-source-rt-4.12.14-10.182.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-rt-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
            },
            product_reference: "kernel-syms-rt-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-rt-4.12.14-10.182.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
               product_id: "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            },
            product_reference: "ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2019-25160",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-25160",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlabel: fix out-of-bounds memory accesses\n\nThere are two array out-of-bounds memory accesses, one in\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both\nerrors are embarassingly simple, and the fixes are straightforward.\n\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\nyou'll want to apply the netlbl_bitmap_walk() patch to\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before\nLinux v4.8.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-25160",
               url: "https://www.suse.com/security/cve/CVE-2019-25160",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220394 for CVE-2019-25160",
               url: "https://bugzilla.suse.com/1220394",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-25160",
      },
      {
         cve: "CVE-2021-46904",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46904",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hso: fix null-ptr-deref during tty device unregistration\n\nMultiple ttys try to claim the same the minor number causing a double\nunregistration of the same device. The first unregistration succeeds\nbut the next one results in a null-ptr-deref.\n\nThe get_free_serial_index() function returns an available minor number\nbut doesn't assign it immediately. The assignment is done by the caller\nlater. But before this assignment, calls to get_free_serial_index()\nwould return the same minor number.\n\nFix this by modifying get_free_serial_index to assign the minor number\nimmediately after one is found to be and rename it to obtain_minor()\nto better reflect what it does. Similary, rename set_serial_by_index()\nto release_minor() and modify it to free up the minor number of the\ngiven hso_serial. Every obtain_minor() should have corresponding\nrelease_minor() call.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46904",
               url: "https://www.suse.com/security/cve/CVE-2021-46904",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220416 for CVE-2021-46904",
               url: "https://bugzilla.suse.com/1220416",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46904",
      },
      {
         cve: "CVE-2021-46905",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46905",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hso: fix NULL-deref on disconnect regression\n\nCommit 8a12f8836145 (\"net: hso: fix null-ptr-deref during tty device\nunregistration\") fixed the racy minor allocation reported by syzbot, but\nintroduced an unconditional NULL-pointer dereference on every disconnect\ninstead.\n\nSpecifically, the serial device table must no longer be accessed after\nthe minor has been released by hso_serial_tty_unregister().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46905",
               url: "https://www.suse.com/security/cve/CVE-2021-46905",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220418 for CVE-2021-46905",
               url: "https://bugzilla.suse.com/1220418",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2021-46905",
      },
      {
         cve: "CVE-2021-46909",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46909",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: footbridge: fix PCI interrupt mapping\n\nSince commit 30fdfb929e82 (\"PCI: Add a call to pci_assign_irq() in\npci_device_probe()\"), the PCI code will call the IRQ mapping function\nwhenever a PCI driver is probed. If these are marked as __init, this\ncauses an oops if a PCI driver is loaded or bound after the kernel has\ninitialised.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46909",
               url: "https://www.suse.com/security/cve/CVE-2021-46909",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220442 for CVE-2021-46909",
               url: "https://bugzilla.suse.com/1220442",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46909",
      },
      {
         cve: "CVE-2021-46938",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46938",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndm rq: fix double free of blk_mq_tag_set in dev remove after table load fails\n\nWhen loading a device-mapper table for a request-based mapped device,\nand the allocation/initialization of the blk_mq_tag_set for the device\nfails, a following device remove will cause a double free.\n\nE.g. (dmesg):\n  device-mapper: core: Cannot initialize queue for request-based dm-mq mapped device\n  device-mapper: ioctl: unable to set up device queue for new table.\n  Unable to handle kernel pointer dereference in virtual kernel address space\n  Failing address: 0305e098835de000 TEID: 0305e098835de803\n  Fault in home space mode while using kernel ASCE.\n  AS:000000025efe0007 R3:0000000000000024\n  Oops: 0038 ilc:3 [#1] SMP\n  Modules linked in: ... lots of modules ...\n  Supported: Yes, External\n  CPU: 0 PID: 7348 Comm: multipathd Kdump: loaded Tainted: G        W      X    5.3.18-53-default #1 SLE15-SP3\n  Hardware name: IBM 8561 T01 7I2 (LPAR)\n  Krnl PSW : 0704e00180000000 000000025e368eca (kfree+0x42/0x330)\n             R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3\n  Krnl GPRS: 000000000000004a 000000025efe5230 c1773200d779968d 0000000000000000\n             000000025e520270 000000025e8d1b40 0000000000000003 00000007aae10000\n             000000025e5202a2 0000000000000001 c1773200d779968d 0305e098835de640\n             00000007a8170000 000003ff80138650 000000025e5202a2 000003e00396faa8\n  Krnl Code: 000000025e368eb8: c4180041e100       lgrl    %r1,25eba50b8\n             000000025e368ebe: ecba06b93a55       risbg   %r11,%r10,6,185,58\n            #000000025e368ec4: e3b010000008       ag      %r11,0(%r1)\n            >000000025e368eca: e310b0080004       lg      %r1,8(%r11)\n             000000025e368ed0: a7110001           tmll    %r1,1\n             000000025e368ed4: a7740129           brc     7,25e369126\n             000000025e368ed8: e320b0080004       lg      %r2,8(%r11)\n             000000025e368ede: b904001b           lgr     %r1,%r11\n  Call Trace:\n   [<000000025e368eca>] kfree+0x42/0x330\n   [<000000025e5202a2>] blk_mq_free_tag_set+0x72/0xb8\n   [<000003ff801316a8>] dm_mq_cleanup_mapped_device+0x38/0x50 [dm_mod]\n   [<000003ff80120082>] free_dev+0x52/0xd0 [dm_mod]\n   [<000003ff801233f0>] __dm_destroy+0x150/0x1d0 [dm_mod]\n   [<000003ff8012bb9a>] dev_remove+0x162/0x1c0 [dm_mod]\n   [<000003ff8012a988>] ctl_ioctl+0x198/0x478 [dm_mod]\n   [<000003ff8012ac8a>] dm_ctl_ioctl+0x22/0x38 [dm_mod]\n   [<000000025e3b11ee>] ksys_ioctl+0xbe/0xe0\n   [<000000025e3b127a>] __s390x_sys_ioctl+0x2a/0x40\n   [<000000025e8c15ac>] system_call+0xd8/0x2c8\n  Last Breaking-Event-Address:\n   [<000000025e52029c>] blk_mq_free_tag_set+0x6c/0xb8\n  Kernel panic - not syncing: Fatal exception: panic_on_oops\n\nWhen allocation/initialization of the blk_mq_tag_set fails in\ndm_mq_init_request_queue(), it is uninitialized/freed, but the pointer\nis not reset to NULL; so when dev_remove() later gets into\ndm_mq_cleanup_mapped_device() it sees the pointer and tries to\nuninitialize and free it again.\n\nFix this by setting the pointer to NULL in dm_mq_init_request_queue()\nerror-handling. Also set it to NULL in dm_mq_cleanup_mapped_device().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46938",
               url: "https://www.suse.com/security/cve/CVE-2021-46938",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220554 for CVE-2021-46938",
               url: "https://bugzilla.suse.com/1220554",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46938",
      },
      {
         cve: "CVE-2021-46939",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46939",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Restructure trace_clock_global() to never block\n\nIt was reported that a fix to the ring buffer recursion detection would\ncause a hung machine when performing suspend / resume testing. The\nfollowing backtrace was extracted from debugging that case:\n\nCall Trace:\n trace_clock_global+0x91/0xa0\n __rb_reserve_next+0x237/0x460\n ring_buffer_lock_reserve+0x12a/0x3f0\n trace_buffer_lock_reserve+0x10/0x50\n __trace_graph_return+0x1f/0x80\n trace_graph_return+0xb7/0xf0\n ? trace_clock_global+0x91/0xa0\n ftrace_return_to_handler+0x8b/0xf0\n ? pv_hash+0xa0/0xa0\n return_to_handler+0x15/0x30\n ? ftrace_graph_caller+0xa0/0xa0\n ? trace_clock_global+0x91/0xa0\n ? __rb_reserve_next+0x237/0x460\n ? ring_buffer_lock_reserve+0x12a/0x3f0\n ? trace_event_buffer_lock_reserve+0x3c/0x120\n ? trace_event_buffer_reserve+0x6b/0xc0\n ? trace_event_raw_event_device_pm_callback_start+0x125/0x2d0\n ? dpm_run_callback+0x3b/0xc0\n ? pm_ops_is_empty+0x50/0x50\n ? platform_get_irq_byname_optional+0x90/0x90\n ? trace_device_pm_callback_start+0x82/0xd0\n ? dpm_run_callback+0x49/0xc0\n\nWith the following RIP:\n\nRIP: 0010:native_queued_spin_lock_slowpath+0x69/0x200\n\nSince the fix to the recursion detection would allow a single recursion to\nhappen while tracing, this lead to the trace_clock_global() taking a spin\nlock and then trying to take it again:\n\nring_buffer_lock_reserve() {\n  trace_clock_global() {\n    arch_spin_lock() {\n      queued_spin_lock_slowpath() {\n        /* lock taken */\n        (something else gets traced by function graph tracer)\n          ring_buffer_lock_reserve() {\n            trace_clock_global() {\n              arch_spin_lock() {\n                queued_spin_lock_slowpath() {\n                /* DEAD LOCK! */\n\nTracing should *never* block, as it can lead to strange lockups like the\nabove.\n\nRestructure the trace_clock_global() code to instead of simply taking a\nlock to update the recorded \"prev_time\" simply use it, as two events\nhappening on two different CPUs that calls this at the same time, really\ndoesn't matter which one goes first. Use a trylock to grab the lock for\nupdating the prev_time, and if it fails, simply try again the next time.\nIf it failed to be taken, that means something else is already updating\nit.\n\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=212761",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46939",
               url: "https://www.suse.com/security/cve/CVE-2021-46939",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220580 for CVE-2021-46939",
               url: "https://bugzilla.suse.com/1220580",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46939",
      },
      {
         cve: "CVE-2021-46941",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46941",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: core: Do core softreset when switch mode\n\n\nAccording to the programming guide, to switch mode for DRD controller,\nthe driver needs to do the following.\n\nTo switch from device to host:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(host mode)\n3. Reset the host with USBCMD.HCRESET\n4. Then follow up with the initializing host registers sequence\n\nTo switch from host to device:\n1. Reset controller with GCTL.CoreSoftReset\n2. Set GCTL.PrtCapDir(device mode)\n3. Reset the device with DCTL.CSftRst\n4. Then follow up with the initializing registers sequence\n\nCurrently we're missing step 1) to do GCTL.CoreSoftReset and step 3) of\nswitching from host to device. John Stult reported a lockup issue seen\nwith HiKey960 platform without these steps[1]. Similar issue is observed\nwith Ferry's testing platform[2].\n\nSo, apply the required steps along with some fixes to Yu Chen's and John\nStultz's version. The main fixes to their versions are the missing wait\nfor clocks synchronization before clearing GCTL.CoreSoftReset and only\napply DCTL.CSftRst when switching from host to device.\n\n[1] https://lore.kernel.org/linux-usb/20210108015115.27920-1-john.stultz@linaro.org/\n[2] https://lore.kernel.org/linux-usb/0ba7a6ba-e6a7-9cd4-0695-64fc927e01f1@gmail.com/",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46941",
               url: "https://www.suse.com/security/cve/CVE-2021-46941",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220628 for CVE-2021-46941",
               url: "https://bugzilla.suse.com/1220628",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46941",
      },
      {
         cve: "CVE-2021-46950",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46950",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid1: properly indicate failure when ending a failed write request\n\nThis patch addresses a data corruption bug in raid1 arrays using bitmaps.\nWithout this fix, the bitmap bits for the failed I/O end up being cleared.\n\nSince we are in the failure leg of raid1_end_write_request, the request\neither needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46950",
               url: "https://www.suse.com/security/cve/CVE-2021-46950",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220662 for CVE-2021-46950",
               url: "https://bugzilla.suse.com/1220662",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2021-46950",
      },
      {
         cve: "CVE-2021-46958",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46958",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix race between transaction aborts and fsyncs leading to use-after-free\n\nThere is a race between a task aborting a transaction during a commit,\na task doing an fsync and the transaction kthread, which leads to an\nuse-after-free of the log root tree. When this happens, it results in a\nstack trace like the following:\n\n  BTRFS info (device dm-0): forced readonly\n  BTRFS warning (device dm-0): Skipping commit of aborted transaction.\n  BTRFS: error (device dm-0) in cleanup_transaction:1958: errno=-5 IO failure\n  BTRFS warning (device dm-0): lost page write due to IO error on /dev/mapper/error-test (-5)\n  BTRFS warning (device dm-0): Skipping commit of aborted transaction.\n  BTRFS warning (device dm-0): direct IO failed ino 261 rw 0,0 sector 0xa4e8 len 4096 err no 10\n  BTRFS error (device dm-0): error writing primary super block to device 1\n  BTRFS warning (device dm-0): direct IO failed ino 261 rw 0,0 sector 0x12e000 len 4096 err no 10\n  BTRFS warning (device dm-0): direct IO failed ino 261 rw 0,0 sector 0x12e008 len 4096 err no 10\n  BTRFS warning (device dm-0): direct IO failed ino 261 rw 0,0 sector 0x12e010 len 4096 err no 10\n  BTRFS: error (device dm-0) in write_all_supers:4110: errno=-5 IO failure (1 errors while writing supers)\n  BTRFS: error (device dm-0) in btrfs_sync_log:3308: errno=-5 IO failure\n  general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b68: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI\n  CPU: 2 PID: 2458471 Comm: fsstress Not tainted 5.12.0-rc5-btrfs-next-84 #1\n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n  RIP: 0010:__mutex_lock+0x139/0xa40\n  Code: c0 74 19 (...)\n  RSP: 0018:ffff9f18830d7b00 EFLAGS: 00010202\n  RAX: 6b6b6b6b6b6b6b68 RBX: 0000000000000001 RCX: 0000000000000002\n  RDX: ffffffffb9c54d13 RSI: 0000000000000000 RDI: 0000000000000000\n  RBP: ffff9f18830d7bc0 R08: 0000000000000000 R09: 0000000000000000\n  R10: ffff9f18830d7be0 R11: 0000000000000001 R12: ffff8c6cd199c040\n  R13: ffff8c6c95821358 R14: 00000000fffffffb R15: ffff8c6cbcf01358\n  FS:  00007fa9140c2b80(0000) GS:ffff8c6fac600000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00007fa913d52000 CR3: 000000013d2b4003 CR4: 0000000000370ee0\n  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n  Call Trace:\n   ? __btrfs_handle_fs_error+0xde/0x146 [btrfs]\n   ? btrfs_sync_log+0x7c1/0xf20 [btrfs]\n   ? btrfs_sync_log+0x7c1/0xf20 [btrfs]\n   btrfs_sync_log+0x7c1/0xf20 [btrfs]\n   btrfs_sync_file+0x40c/0x580 [btrfs]\n   do_fsync+0x38/0x70\n   __x64_sys_fsync+0x10/0x20\n   do_syscall_64+0x33/0x80\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\n  RIP: 0033:0x7fa9142a55c3\n  Code: 8b 15 09 (...)\n  RSP: 002b:00007fff26278d48 EFLAGS: 00000246 ORIG_RAX: 000000000000004a\n  RAX: ffffffffffffffda RBX: 0000563c83cb4560 RCX: 00007fa9142a55c3\n  RDX: 00007fff26278cb0 RSI: 00007fff26278cb0 RDI: 0000000000000005\n  RBP: 0000000000000005 R08: 0000000000000001 R09: 00007fff26278d5c\n  R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000340\n  R13: 00007fff26278de0 R14: 00007fff26278d96 R15: 0000563c83ca57c0\n  Modules linked in: btrfs dm_zero dm_snapshot dm_thin_pool (...)\n  ---[ end trace ee2f1b19327d791d ]---\n\nThe steps that lead to this crash are the following:\n\n1) We are at transaction N;\n\n2) We have two tasks with a transaction handle attached to transaction N.\n   Task A and Task B. Task B is doing an fsync;\n\n3) Task B is at btrfs_sync_log(), and has saved fs_info->log_root_tree\n   into a local variable named 'log_root_tree' at the top of\n   btrfs_sync_log(). Task B is about to call write_all_supers(), but\n   before that...\n\n4) Task A calls btrfs_commit_transaction(), and after it sets the\n   transaction state to TRANS_STATE_COMMIT_START, an error happens before\n   it w\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46958",
               url: "https://www.suse.com/security/cve/CVE-2021-46958",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220521 for CVE-2021-46958",
               url: "https://bugzilla.suse.com/1220521",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46958",
      },
      {
         cve: "CVE-2021-46960",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46960",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Return correct error code from smb2_get_enc_key\n\nAvoid a warning if the error percolates back up:\n\n[440700.376476] CIFS VFS: \\\\otters.example.com crypt_message: Could not get encryption key\n[440700.386947] ------------[ cut here ]------------\n[440700.386948] err = 1\n[440700.386977] WARNING: CPU: 11 PID: 2733 at /build/linux-hwe-5.4-p6lk6L/linux-hwe-5.4-5.4.0/lib/errseq.c:74 errseq_set+0x5c/0x70\n...\n[440700.397304] CPU: 11 PID: 2733 Comm: tar Tainted: G           OE     5.4.0-70-generic #78~18.04.1-Ubuntu\n...\n[440700.397334] Call Trace:\n[440700.397346]  __filemap_set_wb_err+0x1a/0x70\n[440700.397419]  cifs_writepages+0x9c7/0xb30 [cifs]\n[440700.397426]  do_writepages+0x4b/0xe0\n[440700.397444]  __filemap_fdatawrite_range+0xcb/0x100\n[440700.397455]  filemap_write_and_wait+0x42/0xa0\n[440700.397486]  cifs_setattr+0x68b/0xf30 [cifs]\n[440700.397493]  notify_change+0x358/0x4a0\n[440700.397500]  utimes_common+0xe9/0x1c0\n[440700.397510]  do_utimes+0xc5/0x150\n[440700.397520]  __x64_sys_utimensat+0x88/0xd0",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46960",
               url: "https://www.suse.com/security/cve/CVE-2021-46960",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220528 for CVE-2021-46960",
               url: "https://bugzilla.suse.com/1220528",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2021-46960",
      },
      {
         cve: "CVE-2021-46963",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46963",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()\n\n    RIP: 0010:kmem_cache_free+0xfa/0x1b0\n    Call Trace:\n       qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx]\n       scsi_queue_rq+0x5e2/0xa40\n       __blk_mq_try_issue_directly+0x128/0x1d0\n       blk_mq_request_issue_directly+0x4e/0xb0\n\nFix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now\nallocated by upper layers. This fixes smatch warning of srb unintended\nfree.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46963",
               url: "https://www.suse.com/security/cve/CVE-2021-46963",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220536 for CVE-2021-46963",
               url: "https://bugzilla.suse.com/1220536",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46963",
      },
      {
         cve: "CVE-2021-46964",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46964",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Reserve extra IRQ vectors\n\nCommit a6dcfe08487e (\"scsi: qla2xxx: Limit interrupt vectors to number of\nCPUs\") lowers the number of allocated MSI-X vectors to the number of CPUs.\n\nThat breaks vector allocation assumptions in qla83xx_iospace_config(),\nqla24xx_enable_msix() and qla2x00_iospace_config(). Either of the functions\ncomputes maximum number of qpairs as:\n\n  ha->max_qpairs = ha->msix_count - 1 (MB interrupt) - 1 (default\n                   response queue) - 1 (ATIO, in dual or pure target mode)\n\nmax_qpairs is set to zero in case of two CPUs and initiator mode. The\nnumber is then used to allocate ha->queue_pair_map inside\nqla2x00_alloc_queues(). No allocation happens and ha->queue_pair_map is\nleft NULL but the driver thinks there are queue pairs available.\n\nqla2xxx_queuecommand() tries to find a qpair in the map and crashes:\n\n  if (ha->mqenable) {\n          uint32_t tag;\n          uint16_t hwq;\n          struct qla_qpair *qpair = NULL;\n\n          tag = blk_mq_unique_tag(cmd->request);\n          hwq = blk_mq_unique_tag_to_hwq(tag);\n          qpair = ha->queue_pair_map[hwq]; # <- HERE\n\n          if (qpair)\n                  return qla2xxx_mqueuecommand(host, cmd, qpair);\n  }\n\n  BUG: kernel NULL pointer dereference, address: 0000000000000000\n  #PF: supervisor read access in kernel mode\n  #PF: error_code(0x0000) - not-present page\n  PGD 0 P4D 0\n  Oops: 0000 [#1] SMP PTI\n  CPU: 0 PID: 72 Comm: kworker/u4:3 Tainted: G        W         5.10.0-rc1+ #25\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.0.0-prebuilt.qemu-project.org 04/01/2014\n  Workqueue: scsi_wq_7 fc_scsi_scan_rport [scsi_transport_fc]\n  RIP: 0010:qla2xxx_queuecommand+0x16b/0x3f0 [qla2xxx]\n  Call Trace:\n   scsi_queue_rq+0x58c/0xa60\n   blk_mq_dispatch_rq_list+0x2b7/0x6f0\n   ? __sbitmap_get_word+0x2a/0x80\n   __blk_mq_sched_dispatch_requests+0xb8/0x170\n   blk_mq_sched_dispatch_requests+0x2b/0x50\n   __blk_mq_run_hw_queue+0x49/0xb0\n   __blk_mq_delay_run_hw_queue+0xfb/0x150\n   blk_mq_sched_insert_request+0xbe/0x110\n   blk_execute_rq+0x45/0x70\n   __scsi_execute+0x10e/0x250\n   scsi_probe_and_add_lun+0x228/0xda0\n   __scsi_scan_target+0xf4/0x620\n   ? __pm_runtime_resume+0x4f/0x70\n   scsi_scan_target+0x100/0x110\n   fc_scsi_scan_rport+0xa1/0xb0 [scsi_transport_fc]\n   process_one_work+0x1ea/0x3b0\n   worker_thread+0x28/0x3b0\n   ? process_one_work+0x3b0/0x3b0\n   kthread+0x112/0x130\n   ? kthread_park+0x80/0x80\n   ret_from_fork+0x22/0x30\n\nThe driver should allocate enough vectors to provide every CPU it's own HW\nqueue and still handle reserved (MB, RSP, ATIO) interrupts.\n\nThe change fixes the crash on dual core VM and prevents unbalanced QP\nallocation where nr_hw_queues is two less than the number of CPUs.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46964",
               url: "https://www.suse.com/security/cve/CVE-2021-46964",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220538 for CVE-2021-46964",
               url: "https://bugzilla.suse.com/1220538",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46964",
      },
      {
         cve: "CVE-2021-46966",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46966",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: custom_method: fix potential use-after-free issue\n\nIn cm_write(), buf is always freed when reaching the end of the\nfunction.  If the requested count is less than table.length, the\nallocated buffer will be freed but subsequent calls to cm_write() will\nstill try to access it.\n\nRemove the unconditional kfree(buf) at the end of the function and\nset the buf to NULL in the -EINVAL error path to match the rest of\nfunction.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46966",
               url: "https://www.suse.com/security/cve/CVE-2021-46966",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220572 for CVE-2021-46966",
               url: "https://bugzilla.suse.com/1220572",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46966",
      },
      {
         cve: "CVE-2021-46981",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46981",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: Fix NULL pointer in flush_workqueue\n\nOpen /dev/nbdX first, the config_refs will be 1 and\nthe pointers in nbd_device are still null. Disconnect\n/dev/nbdX, then reference a null recv_workq. The\nprotection by config_refs in nbd_genl_disconnect is useless.\n\n[  656.366194] BUG: kernel NULL pointer dereference, address: 0000000000000020\n[  656.368943] #PF: supervisor write access in kernel mode\n[  656.369844] #PF: error_code(0x0002) - not-present page\n[  656.370717] PGD 10cc87067 P4D 10cc87067 PUD 1074b4067 PMD 0\n[  656.371693] Oops: 0002 [#1] SMP\n[  656.372242] CPU: 5 PID: 7977 Comm: nbd-client Not tainted 5.11.0-rc5-00040-g76c057c84d28 #1\n[  656.373661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014\n[  656.375904] RIP: 0010:mutex_lock+0x29/0x60\n[  656.376627] Code: 00 0f 1f 44 00 00 55 48 89 fd 48 83 05 6f d7 fe 08 01 e8 7a c3 ff ff 48 83 05 6a d7 fe 08 01 31 c0 65 48 8b 14 25 00 6d 01 00 <f0> 48 0f b1 55 d\n[  656.378934] RSP: 0018:ffffc900005eb9b0 EFLAGS: 00010246\n[  656.379350] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000\n[  656.379915] RDX: ffff888104cf2600 RSI: ffffffffaae8f452 RDI: 0000000000000020\n[  656.380473] RBP: 0000000000000020 R08: 0000000000000000 R09: ffff88813bd6b318\n[  656.381039] R10: 00000000000000c7 R11: fefefefefefefeff R12: ffff888102710b40\n[  656.381599] R13: ffffc900005eb9e0 R14: ffffffffb2930680 R15: ffff88810770ef00\n[  656.382166] FS:  00007fdf117ebb40(0000) GS:ffff88813bd40000(0000) knlGS:0000000000000000\n[  656.382806] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  656.383261] CR2: 0000000000000020 CR3: 0000000100c84000 CR4: 00000000000006e0\n[  656.383819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[  656.384370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[  656.384927] Call Trace:\n[  656.385111]  flush_workqueue+0x92/0x6c0\n[  656.385395]  nbd_disconnect_and_put+0x81/0xd0\n[  656.385716]  nbd_genl_disconnect+0x125/0x2a0\n[  656.386034]  genl_family_rcv_msg_doit.isra.0+0x102/0x1b0\n[  656.386422]  genl_rcv_msg+0xfc/0x2b0\n[  656.386685]  ? nbd_ioctl+0x490/0x490\n[  656.386954]  ? genl_family_rcv_msg_doit.isra.0+0x1b0/0x1b0\n[  656.387354]  netlink_rcv_skb+0x62/0x180\n[  656.387638]  genl_rcv+0x34/0x60\n[  656.387874]  netlink_unicast+0x26d/0x590\n[  656.388162]  netlink_sendmsg+0x398/0x6c0\n[  656.388451]  ? netlink_rcv_skb+0x180/0x180\n[  656.388750]  ____sys_sendmsg+0x1da/0x320\n[  656.389038]  ? ____sys_recvmsg+0x130/0x220\n[  656.389334]  ___sys_sendmsg+0x8e/0xf0\n[  656.389605]  ? ___sys_recvmsg+0xa2/0xf0\n[  656.389889]  ? handle_mm_fault+0x1671/0x21d0\n[  656.390201]  __sys_sendmsg+0x6d/0xe0\n[  656.390464]  __x64_sys_sendmsg+0x23/0x30\n[  656.390751]  do_syscall_64+0x45/0x70\n[  656.391017]  entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nTo fix it, just add if (nbd->recv_workq) to nbd_disconnect_and_put().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46981",
               url: "https://www.suse.com/security/cve/CVE-2021-46981",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220611 for CVE-2021-46981",
               url: "https://bugzilla.suse.com/1220611",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46981",
      },
      {
         cve: "CVE-2021-46988",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46988",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nuserfaultfd: release page in error path to avoid BUG_ON\n\nConsider the following sequence of events:\n\n1. Userspace issues a UFFD ioctl, which ends up calling into\n   shmem_mfill_atomic_pte(). We successfully account the blocks, we\n   shmem_alloc_page(), but then the copy_from_user() fails. We return\n   -ENOENT. We don't release the page we allocated.\n2. Our caller detects this error code, tries the copy_from_user() after\n   dropping the mmap_lock, and retries, calling back into\n   shmem_mfill_atomic_pte().\n3. Meanwhile, let's say another process filled up the tmpfs being used.\n4. So shmem_mfill_atomic_pte() fails to account blocks this time, and\n   immediately returns - without releasing the page.\n\nThis triggers a BUG_ON in our caller, which asserts that the page\nshould always be consumed, unless -ENOENT is returned.\n\nTo fix this, detect if we have such a \"dangling\" page when accounting\nfails, and if so, release it before returning.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46988",
               url: "https://www.suse.com/security/cve/CVE-2021-46988",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220706 for CVE-2021-46988",
               url: "https://bugzilla.suse.com/1220706",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46988",
      },
      {
         cve: "CVE-2021-46990",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46990",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: Fix crashes when toggling entry flush barrier\n\nThe entry flush mitigation can be enabled/disabled at runtime via a\ndebugfs file (entry_flush), which causes the kernel to patch itself to\nenable/disable the relevant mitigations.\n\nHowever depending on which mitigation we're using, it may not be safe to\ndo that patching while other CPUs are active. For example the following\ncrash:\n\n  sleeper[15639]: segfault (11) at c000000000004c20 nip c000000000004c20 lr c000000000004c20\n\nShows that we returned to userspace with a corrupted LR that points into\nthe kernel, due to executing the partially patched call to the fallback\nentry flush (ie. we missed the LR restore).\n\nFix it by doing the patching under stop machine. The CPUs that aren't\ndoing the patching will be spinning in the core of the stop machine\nlogic. That is currently sufficient for our purposes, because none of\nthe patching we do is to that code or anywhere in the vicinity.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46990",
               url: "https://www.suse.com/security/cve/CVE-2021-46990",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220743 for CVE-2021-46990",
               url: "https://bugzilla.suse.com/1220743",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46990",
      },
      {
         cve: "CVE-2021-46998",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-46998",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nethernet:enic: Fix a use after free bug in enic_hard_start_xmit\n\nIn enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside\nenic_queue_wq_skb, if some error happens, the skb will be freed\nby dev_kfree_skb(skb). But the freed skb is still used in\nskb_tx_timestamp(skb).\n\nMy patch makes enic_queue_wq_skb() return error and goto spin_unlock()\nincase of error. The solution is provided by Govind.\nSee https://lkml.org/lkml/2021/4/30/961.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-46998",
               url: "https://www.suse.com/security/cve/CVE-2021-46998",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220625 for CVE-2021-46998",
               url: "https://bugzilla.suse.com/1220625",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-46998",
      },
      {
         cve: "CVE-2021-47006",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47006",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook\n\nThe commit 1879445dfa7b (\"perf/core: Set event's default\n::overflow_handler()\") set a default event->overflow_handler in\nperf_event_alloc(), and replace the check event->overflow_handler with\nis_default_overflow_handler(), but one is missing.\n\nCurrently, the bp->overflow_handler can not be NULL. As a result,\nenable_single_step() is always not invoked.\n\nComments from Zhen Lei:\n\n https://patchwork.kernel.org/project/linux-arm-kernel/patch/20210207105934.2001-1-thunder.leizhen@huawei.com/",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47006",
               url: "https://www.suse.com/security/cve/CVE-2021-47006",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220751 for CVE-2021-47006",
               url: "https://bugzilla.suse.com/1220751",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47006",
      },
      {
         cve: "CVE-2021-47015",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47015",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix RX consumer index logic in the error path.\n\nIn bnxt_rx_pkt(), the RX buffers are expected to complete in order.\nIf the RX consumer index indicates an out of order buffer completion,\nit means we are hitting a hardware bug and the driver will abort all\nremaining RX packets and reset the RX ring.  The RX consumer index\nthat we pass to bnxt_discard_rx() is not correct.  We should be\npassing the current index (tmp_raw_cons) instead of the old index\n(raw_cons).  This bug can cause us to be at the wrong index when\ntrying to abort the next RX packet.  It can crash like this:\n\n #0 [ffff9bbcdf5c39a8] machine_kexec at ffffffff9b05e007\n #1 [ffff9bbcdf5c3a00] __crash_kexec at ffffffff9b111232\n #2 [ffff9bbcdf5c3ad0] panic at ffffffff9b07d61e\n #3 [ffff9bbcdf5c3b50] oops_end at ffffffff9b030978\n #4 [ffff9bbcdf5c3b78] no_context at ffffffff9b06aaf0\n #5 [ffff9bbcdf5c3bd8] __bad_area_nosemaphore at ffffffff9b06ae2e\n #6 [ffff9bbcdf5c3c28] bad_area_nosemaphore at ffffffff9b06af24\n #7 [ffff9bbcdf5c3c38] __do_page_fault at ffffffff9b06b67e\n #8 [ffff9bbcdf5c3cb0] do_page_fault at ffffffff9b06bb12\n #9 [ffff9bbcdf5c3ce0] page_fault at ffffffff9bc015c5\n    [exception RIP: bnxt_rx_pkt+237]\n    RIP: ffffffffc0259cdd  RSP: ffff9bbcdf5c3d98  RFLAGS: 00010213\n    RAX: 000000005dd8097f  RBX: ffff9ba4cb11b7e0  RCX: ffffa923cf6e9000\n    RDX: 0000000000000fff  RSI: 0000000000000627  RDI: 0000000000001000\n    RBP: ffff9bbcdf5c3e60   R8: 0000000000420003   R9: 000000000000020d\n    R10: ffffa923cf6ec138  R11: ffff9bbcdf5c3e83  R12: ffff9ba4d6f928c0\n    R13: ffff9ba4cac28080  R14: ffff9ba4cb11b7f0  R15: ffff9ba4d5a30000\n    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47015",
               url: "https://www.suse.com/security/cve/CVE-2021-47015",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220794 for CVE-2021-47015",
               url: "https://bugzilla.suse.com/1220794",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47015",
      },
      {
         cve: "CVE-2021-47024",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47024",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: free queued packets when closing socket\n\nAs reported by syzbot [1], there is a memory leak while closing the\nsocket. We partially solved this issue with commit ac03046ece2b\n(\"vsock/virtio: free packets during the socket release\"), but we\nforgot to drain the RX queue when the socket is definitely closed by\nthe scheduled work.\n\nTo avoid future issues, let's use the new virtio_transport_remove_sock()\nto drain the RX queue before removing the socket from the af_vsock lists\ncalling vsock_remove_sock().\n\n[1] https://syzkaller.appspot.com/bug?extid=24452624fc4c571eedd9",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47024",
               url: "https://www.suse.com/security/cve/CVE-2021-47024",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220637 for CVE-2021-47024",
               url: "https://bugzilla.suse.com/1220637",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47024",
      },
      {
         cve: "CVE-2021-47034",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47034",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: Fix pte update for kernel memory on radix\n\nWhen adding a PTE a ptesync is needed to order the update of the PTE\nwith subsequent accesses otherwise a spurious fault may be raised.\n\nradix__set_pte_at() does not do this for performance gains. For\nnon-kernel memory this is not an issue as any faults of this kind are\ncorrected by the page fault handler. For kernel memory these faults\nare not handled. The current solution is that there is a ptesync in\nflush_cache_vmap() which should be called when mapping from the\nvmalloc region.\n\nHowever, map_kernel_page() does not call flush_cache_vmap(). This is\ntroublesome in particular for code patching with Strict RWX on radix.\nIn do_patch_instruction() the page frame that contains the instruction\nto be patched is mapped and then immediately patched. With no ordering\nor synchronization between setting up the PTE and writing to the page\nit is possible for faults.\n\nAs the code patching is done using __put_user_asm_goto() the resulting\nfault is obscured - but using a normal store instead it can be seen:\n\n  BUG: Unable to handle kernel data access on write at 0xc008000008f24a3c\n  Faulting instruction address: 0xc00000000008bd74\n  Oops: Kernel access of bad area, sig: 11 [#1]\n  LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA PowerNV\n  Modules linked in: nop_module(PO+) [last unloaded: nop_module]\n  CPU: 4 PID: 757 Comm: sh Tainted: P           O      5.10.0-rc5-01361-ge3c1b78c8440-dirty #43\n  NIP:  c00000000008bd74 LR: c00000000008bd50 CTR: c000000000025810\n  REGS: c000000016f634a0 TRAP: 0300   Tainted: P           O       (5.10.0-rc5-01361-ge3c1b78c8440-dirty)\n  MSR:  9000000000009033 <SF,HV,EE,ME,IR,DR,RI,LE>  CR: 44002884  XER: 00000000\n  CFAR: c00000000007c68c DAR: c008000008f24a3c DSISR: 42000000 IRQMASK: 1\n\nThis results in the kind of issue reported here:\n  https://lore.kernel.org/linuxppc-dev/15AC5B0E-A221-4B8C-9039-FA96B8EF7C88@lca.pw/\n\nChris Riedl suggested a reliable way to reproduce the issue:\n  $ mount -t debugfs none /sys/kernel/debug\n  $ (while true; do echo function > /sys/kernel/debug/tracing/current_tracer ; echo nop > /sys/kernel/debug/tracing/current_tracer ; done) &\n\nTurning ftrace on and off does a large amount of code patching which\nin usually less then 5min will crash giving a trace like:\n\n   ftrace-powerpc: (____ptrval____): replaced (4b473b11) != old (60000000)\n   ------------[ ftrace bug ]------------\n   ftrace failed to modify\n   [<c000000000bf8e5c>] napi_busy_loop+0xc/0x390\n    actual:   11:3b:47:4b\n   Setting ftrace call site to call ftrace function\n   ftrace record flags: 80000001\n    (1)\n    expected tramp: c00000000006c96c\n   ------------[ cut here ]------------\n   WARNING: CPU: 4 PID: 809 at kernel/trace/ftrace.c:2065 ftrace_bug+0x28c/0x2e8\n   Modules linked in: nop_module(PO-) [last unloaded: nop_module]\n   CPU: 4 PID: 809 Comm: sh Tainted: P           O      5.10.0-rc5-01360-gf878ccaf250a #1\n   NIP:  c00000000024f334 LR: c00000000024f330 CTR: c0000000001a5af0\n   REGS: c000000004c8b760 TRAP: 0700   Tainted: P           O       (5.10.0-rc5-01360-gf878ccaf250a)\n   MSR:  900000000282b033 <SF,HV,VEC,VSX,EE,FP,ME,IR,DR,RI,LE>  CR: 28008848  XER: 20040000\n   CFAR: c0000000001a9c98 IRQMASK: 0\n   GPR00: c00000000024f330 c000000004c8b9f0 c000000002770600 0000000000000022\n   GPR04: 00000000ffff7fff c000000004c8b6d0 0000000000000027 c0000007fe9bcdd8\n   GPR08: 0000000000000023 ffffffffffffffd8 0000000000000027 c000000002613118\n   GPR12: 0000000000008000 c0000007fffdca00 0000000000000000 0000000000000000\n   GPR16: 0000000023ec37c5 0000000000000000 0000000000000000 0000000000000008\n   GPR20: c000000004c8bc90 c0000000027a2d20 c000000004c8bcd0 c000000002612fe8\n   GPR24: 0000000000000038 0000000000000030 0000000000000028 0000000000000020\n   GPR28: c000000000ff1b68 c000000000bf8e5c c00000000312f700 c000000000fbb9b0\n   NIP ftrace_bug+0x28c/0x2e8\n   LR  ftrace_bug+0x288/0x2e8\n   Call T\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47034",
               url: "https://www.suse.com/security/cve/CVE-2021-47034",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220687 for CVE-2021-47034",
               url: "https://bugzilla.suse.com/1220687",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47034",
      },
      {
         cve: "CVE-2021-47045",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47045",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()\n\nIt is possible to call lpfc_issue_els_plogi() passing a did for which no\nmatching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a\nnull pointer to a lpfc_nodelist structure resulting in a null pointer\ndereference.\n\nFix by returning an error status if no valid ndlp is found. Fix up comments\nregarding ndlp reference counting.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47045",
               url: "https://www.suse.com/security/cve/CVE-2021-47045",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220640 for CVE-2021-47045",
               url: "https://bugzilla.suse.com/1220640",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47045",
      },
      {
         cve: "CVE-2021-47049",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47049",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: vmbus: Use after free in __vmbus_open()\n\nThe \"open_info\" variable is added to the &vmbus_connection.chn_msg_list,\nbut the error handling frees \"open_info\" without removing it from the\nlist.  This will result in a use after free.  First remove it from the\nlist, and then free it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47049",
               url: "https://www.suse.com/security/cve/CVE-2021-47049",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220692 for CVE-2021-47049",
               url: "https://bugzilla.suse.com/1220692",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47049",
      },
      {
         cve: "CVE-2021-47055",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47055",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: require write permissions for locking and badblock ioctls\n\nMEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require\nwrite permission. Depending on the hardware MEMLOCK might even be\nwrite-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK\nis always write-once.\n\nMEMSETBADBLOCK modifies the bad block table.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47055",
               url: "https://www.suse.com/security/cve/CVE-2021-47055",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220768 for CVE-2021-47055",
               url: "https://bugzilla.suse.com/1220768",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47055",
      },
      {
         cve: "CVE-2021-47056",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47056",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init\n\nADF_STATUS_PF_RUNNING is (only) used and checked by adf_vf2pf_shutdown()\nbefore calling adf_iov_putmsg()->mutex_lock(vf2pf_lock), however the\nvf2pf_lock is initialized in adf_dev_init(), which can fail and when it\nfail, the vf2pf_lock is either not initialized or destroyed, a subsequent\nuse of vf2pf_lock will cause issue.\nTo fix this issue, only set this flag if adf_dev_init() returns 0.\n\n[    7.178404] BUG: KASAN: user-memory-access in __mutex_lock.isra.0+0x1ac/0x7c0\n[    7.180345] Call Trace:\n[    7.182576]  mutex_lock+0xc9/0xd0\n[    7.183257]  adf_iov_putmsg+0x118/0x1a0 [intel_qat]\n[    7.183541]  adf_vf2pf_shutdown+0x4d/0x7b [intel_qat]\n[    7.183834]  adf_dev_shutdown+0x172/0x2b0 [intel_qat]\n[    7.184127]  adf_probe+0x5e9/0x600 [qat_dh895xccvf]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47056",
               url: "https://www.suse.com/security/cve/CVE-2021-47056",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220769 for CVE-2021-47056",
               url: "https://bugzilla.suse.com/1220769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47056",
      },
      {
         cve: "CVE-2021-47060",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47060",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Stop looking for coalesced MMIO zones if the bus is destroyed\n\nAbort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev()\nfails to allocate memory for the new instance of the bus.  If it can't\ninstantiate a new bus, unregister_dev() destroys all devices _except_ the\ntarget device.   But, it doesn't tell the caller that it obliterated the\nbus and invoked the destructor for all devices that were on the bus.  In\nthe coalesced MMIO case, this can result in a deleted list entry\ndereference due to attempting to continue iterating on coalesced_zones\nafter future entries (in the walk) have been deleted.\n\nOpportunistically add curly braces to the for-loop, which encompasses\nmany lines but sneaks by without braces due to the guts being a single\nif statement.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47060",
               url: "https://www.suse.com/security/cve/CVE-2021-47060",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220742 for CVE-2021-47060",
               url: "https://bugzilla.suse.com/1220742",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47060",
      },
      {
         cve: "CVE-2021-47061",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47061",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU\n\nIf allocating a new instance of an I/O bus fails when unregistering a\ndevice, wait to destroy the device until after all readers are guaranteed\nto see the new null bus.  Destroying devices before the bus is nullified\ncould lead to use-after-free since readers expect the devices on their\nreference of the bus to remain valid.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47061",
               url: "https://www.suse.com/security/cve/CVE-2021-47061",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220745 for CVE-2021-47061",
               url: "https://bugzilla.suse.com/1220745",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47061",
      },
      {
         cve: "CVE-2021-47063",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47063",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: bridge/panel: Cleanup connector on bridge detach\n\nIf we don't call drm_connector_cleanup() manually in\npanel_bridge_detach(), the connector will be cleaned up with the other\nDRM objects in the call to drm_mode_config_cleanup(). However, since our\ndrm_connector is devm-allocated, by the time drm_mode_config_cleanup()\nwill be called, our connector will be long gone. Therefore, the\nconnector must be cleaned up when the bridge is detached to avoid\nuse-after-free conditions.\n\nv2: Cleanup connector only if it was created\n\nv3: Add FIXME\n\nv4: (Use connector->dev) directly in if() block",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47063",
               url: "https://www.suse.com/security/cve/CVE-2021-47063",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220777 for CVE-2021-47063",
               url: "https://bugzilla.suse.com/1220777",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47063",
      },
      {
         cve: "CVE-2021-47068",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47068",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/nfc: fix use-after-free llcp_sock_bind/connect\n\nCommits 8a4cd82d (\"nfc: fix refcount leak in llcp_sock_connect()\")\nand c33b1cc62 (\"nfc: fix refcount leak in llcp_sock_bind()\")\nfixed a refcount leak bug in bind/connect but introduced a\nuse-after-free if the same local is assigned to 2 different sockets.\n\nThis can be triggered by the following simple program:\n    int sock1 = socket( AF_NFC, SOCK_STREAM, NFC_SOCKPROTO_LLCP );\n    int sock2 = socket( AF_NFC, SOCK_STREAM, NFC_SOCKPROTO_LLCP );\n    memset( &addr, 0, sizeof(struct sockaddr_nfc_llcp) );\n    addr.sa_family = AF_NFC;\n    addr.nfc_protocol = NFC_PROTO_NFC_DEP;\n    bind( sock1, (struct sockaddr*) &addr, sizeof(struct sockaddr_nfc_llcp) )\n    bind( sock2, (struct sockaddr*) &addr, sizeof(struct sockaddr_nfc_llcp) )\n    close(sock1);\n    close(sock2);\n\nFix this by assigning NULL to llcp_sock->local after calling\nnfc_llcp_local_put.\n\nThis addresses CVE-2021-23134.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47068",
               url: "https://www.suse.com/security/cve/CVE-2021-47068",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220739 for CVE-2021-47068",
               url: "https://bugzilla.suse.com/1220739",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221130 for CVE-2021-47068",
               url: "https://bugzilla.suse.com/1221130",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2021-47068",
      },
      {
         cve: "CVE-2021-47070",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47070",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix another memory leak in error handling paths\n\nMemory allocated by 'vmbus_alloc_ring()' at the beginning of the probe\nfunction is never freed in the error handling path.\n\nAdd the missing 'vmbus_free_ring()' call.\n\nNote that it is already freed in the .remove function.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47070",
               url: "https://www.suse.com/security/cve/CVE-2021-47070",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220829 for CVE-2021-47070",
               url: "https://bugzilla.suse.com/1220829",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47070",
      },
      {
         cve: "CVE-2021-47071",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47071",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix a memory leak in error handling paths\n\nIf 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be\nupdated and 'hv_uio_cleanup()' in the error handling path will not be\nable to free the corresponding buffer.\n\nIn such a case, we need to free the buffer explicitly.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47071",
               url: "https://www.suse.com/security/cve/CVE-2021-47071",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220846 for CVE-2021-47071",
               url: "https://bugzilla.suse.com/1220846",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47071",
      },
      {
         cve: "CVE-2021-47073",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47073",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios\n\ninit_dell_smbios_wmi() only registers the dell_smbios_wmi_driver on systems\nwhere the Dell WMI interface is supported. While exit_dell_smbios_wmi()\nunregisters it unconditionally, this leads to the following oops:\n\n[  175.722921] ------------[ cut here ]------------\n[  175.722925] Unexpected driver unregister!\n[  175.722939] WARNING: CPU: 1 PID: 3630 at drivers/base/driver.c:194 driver_unregister+0x38/0x40\n...\n[  175.723089] Call Trace:\n[  175.723094]  cleanup_module+0x5/0xedd [dell_smbios]\n...\n[  175.723148] ---[ end trace 064c34e1ad49509d ]---\n\nMake the unregister happen on the same condition the register happens\nto fix this.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47073",
               url: "https://www.suse.com/security/cve/CVE-2021-47073",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220850 for CVE-2021-47073",
               url: "https://bugzilla.suse.com/1220850",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47073",
      },
      {
         cve: "CVE-2021-47100",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47100",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module\n\nHi,\n\nWhen testing install and uninstall of ipmi_si.ko and ipmi_msghandler.ko,\nthe system crashed.\n\nThe log as follows:\n[  141.087026] BUG: unable to handle kernel paging request at ffffffffc09b3a5a\n[  141.087241] PGD 8fe4c0d067 P4D 8fe4c0d067 PUD 8fe4c0f067 PMD 103ad89067 PTE 0\n[  141.087464] Oops: 0010 [#1] SMP NOPTI\n[  141.087580] CPU: 67 PID: 668 Comm: kworker/67:1 Kdump: loaded Not tainted 4.18.0.x86_64 #47\n[  141.088009] Workqueue: events 0xffffffffc09b3a40\n[  141.088009] RIP: 0010:0xffffffffc09b3a5a\n[  141.088009] Code: Bad RIP value.\n[  141.088009] RSP: 0018:ffffb9094e2c3e88 EFLAGS: 00010246\n[  141.088009] RAX: 0000000000000000 RBX: ffff9abfdb1f04a0 RCX: 0000000000000000\n[  141.088009] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000246\n[  141.088009] RBP: 0000000000000000 R08: ffff9abfffee3cb8 R09: 00000000000002e1\n[  141.088009] R10: ffffb9094cb73d90 R11: 00000000000f4240 R12: ffff9abfffee8700\n[  141.088009] R13: 0000000000000000 R14: ffff9abfdb1f04a0 R15: ffff9abfdb1f04a8\n[  141.088009] FS:  0000000000000000(0000) GS:ffff9abfffec0000(0000) knlGS:0000000000000000\n[  141.088009] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  141.088009] CR2: ffffffffc09b3a30 CR3: 0000008fe4c0a001 CR4: 00000000007606e0\n[  141.088009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[  141.088009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[  141.088009] PKRU: 55555554\n[  141.088009] Call Trace:\n[  141.088009]  ? process_one_work+0x195/0x390\n[  141.088009]  ? worker_thread+0x30/0x390\n[  141.088009]  ? process_one_work+0x390/0x390\n[  141.088009]  ? kthread+0x10d/0x130\n[  141.088009]  ? kthread_flush_work_fn+0x10/0x10\n[  141.088009]  ? ret_from_fork+0x35/0x40] BUG: unable to handle kernel paging request at ffffffffc0b28a5a\n[  200.223240] PGD 97fe00d067 P4D 97fe00d067 PUD 97fe00f067 PMD a580cbf067 PTE 0\n[  200.223464] Oops: 0010 [#1] SMP NOPTI\n[  200.223579] CPU: 63 PID: 664 Comm: kworker/63:1 Kdump: loaded Not tainted 4.18.0.x86_64 #46\n[  200.224008] Workqueue: events 0xffffffffc0b28a40\n[  200.224008] RIP: 0010:0xffffffffc0b28a5a\n[  200.224008] Code: Bad RIP value.\n[  200.224008] RSP: 0018:ffffbf3c8e2a3e88 EFLAGS: 00010246\n[  200.224008] RAX: 0000000000000000 RBX: ffffa0799ad6bca0 RCX: 0000000000000000\n[  200.224008] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000246\n[  200.224008] RBP: 0000000000000000 R08: ffff9fe43fde3cb8 R09: 00000000000000d5\n[  200.224008] R10: ffffbf3c8cb53d90 R11: 00000000000f4240 R12: ffff9fe43fde8700\n[  200.224008] R13: 0000000000000000 R14: ffffa0799ad6bca0 R15: ffffa0799ad6bca8\n[  200.224008] FS:  0000000000000000(0000) GS:ffff9fe43fdc0000(0000) knlGS:0000000000000000\n[  200.224008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  200.224008] CR2: ffffffffc0b28a30 CR3: 00000097fe00a002 CR4: 00000000007606e0\n[  200.224008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[  200.224008] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[  200.224008] PKRU: 55555554\n[  200.224008] Call Trace:\n[  200.224008]  ? process_one_work+0x195/0x390\n[  200.224008]  ? worker_thread+0x30/0x390\n[  200.224008]  ? process_one_work+0x390/0x390\n[  200.224008]  ? kthread+0x10d/0x130\n[  200.224008]  ? kthread_flush_work_fn+0x10/0x10\n[  200.224008]  ? ret_from_fork+0x35/0x40\n[  200.224008] kernel fault(0x1) notification starting on CPU 63\n[  200.224008] kernel fault(0x1) notification finished on CPU 63\n[  200.224008] CR2: ffffffffc0b28a5a\n[  200.224008] ---[ end trace c82a412d93f57412 ]---\n\nThe reason is as follows:\nT1: rmmod ipmi_si.\n    ->ipmi_unregister_smi()\n        -> ipmi_bmc_unregister()\n            -> __ipmi_bmc_unregister()\n                -> kref_put(&bmc->usecount, cleanup_bmc_device);\n                    -> schedule_work(&bmc->remove_work);\n\nT2: rmmod ipmi_msghandl\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47100",
               url: "https://www.suse.com/security/cve/CVE-2021-47100",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220985 for CVE-2021-47100",
               url: "https://bugzilla.suse.com/1220985",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47100",
      },
      {
         cve: "CVE-2021-47101",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47101",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nasix: fix uninit-value in asix_mdio_read()\n\nasix_read_cmd() may read less than sizeof(smsr) bytes and in this case\nsmsr will be uninitialized.\n\nFail log:\nBUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]\nBUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497\nBUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497\n asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]\n asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497\n asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47101",
               url: "https://www.suse.com/security/cve/CVE-2021-47101",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220987 for CVE-2021-47101",
               url: "https://bugzilla.suse.com/1220987",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2021-47101",
      },
      {
         cve: "CVE-2021-47104",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47104",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()\n\nThe wrong goto label was used for the error case and missed cleanup of the\npkt allocation.\n\nAddresses-Coverity-ID: 1493352 (\"Resource leak\")",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47104",
               url: "https://www.suse.com/security/cve/CVE-2021-47104",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220960 for CVE-2021-47104",
               url: "https://bugzilla.suse.com/1220960",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47104",
      },
      {
         cve: "CVE-2021-47110",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47110",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing '0' to kvmclock MSR doesn't clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don't need to switch to some other clocksource.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47110",
               url: "https://www.suse.com/security/cve/CVE-2021-47110",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221532 for CVE-2021-47110",
               url: "https://bugzilla.suse.com/1221532",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47110",
      },
      {
         cve: "CVE-2021-47112",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47112",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Teardown PV features on boot CPU as well\n\nVarious PV features (Async PF, PV EOI, steal time) work through memory\nshared with hypervisor and when we restore from hibernation we must\nproperly teardown all these features to make sure hypervisor doesn't\nwrite to stale locations after we jump to the previously hibernated kernel\n(which can try to place anything there). For secondary CPUs the job is\nalready done by kvm_cpu_down_prepare(), register syscore ops to do\nthe same for boot CPU.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47112",
               url: "https://www.suse.com/security/cve/CVE-2021-47112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221541 for CVE-2021-47112",
               url: "https://bugzilla.suse.com/1221541",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2021-47112",
      },
      {
         cve: "CVE-2021-47114",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47114",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix data corruption by fallocate\n\nWhen fallocate punches holes out of inode size, if original isize is in\nthe middle of last cluster, then the part from isize to the end of the\ncluster will be zeroed with buffer write, at that time isize is not yet\nupdated to match the new size, if writeback is kicked in, it will invoke\nocfs2_writepage()->block_write_full_page() where the pages out of inode\nsize will be dropped.  That will cause file corruption.  Fix this by\nzero out eof blocks when extending the inode size.\n\nRunning the following command with qemu-image 4.2.1 can get a corrupted\ncoverted image file easily.\n\n    qemu-img convert -p -t none -T none -f qcow2 $qcow_image \\\n             -O qcow2 -o compat=1.1 $qcow_image.conv\n\nThe usage of fallocate in qemu is like this, it first punches holes out\nof inode size, then extend the inode size.\n\n    fallocate(11, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 2276196352, 65536) = 0\n    fallocate(11, 0, 2276196352, 65536) = 0\n\nv1: https://www.spinics.net/lists/linux-fsdevel/msg193999.html\nv2: https://lore.kernel.org/linux-fsdevel/20210525093034.GB4112@quack2.suse.cz/T/",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47114",
               url: "https://www.suse.com/security/cve/CVE-2021-47114",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221548 for CVE-2021-47114",
               url: "https://bugzilla.suse.com/1221548",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47114",
      },
      {
         cve: "CVE-2021-47117",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47117",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed\n\nWe got follow bug_on when run fsstress with injecting IO fault:\n[130747.323114] kernel BUG at fs/ext4/extents_status.c:762!\n[130747.323117] Internal error: Oops - BUG: 0 [#1] SMP\n......\n[130747.334329] Call trace:\n[130747.334553]  ext4_es_cache_extent+0x150/0x168 [ext4]\n[130747.334975]  ext4_cache_extents+0x64/0xe8 [ext4]\n[130747.335368]  ext4_find_extent+0x300/0x330 [ext4]\n[130747.335759]  ext4_ext_map_blocks+0x74/0x1178 [ext4]\n[130747.336179]  ext4_map_blocks+0x2f4/0x5f0 [ext4]\n[130747.336567]  ext4_mpage_readpages+0x4a8/0x7a8 [ext4]\n[130747.336995]  ext4_readpage+0x54/0x100 [ext4]\n[130747.337359]  generic_file_buffered_read+0x410/0xae8\n[130747.337767]  generic_file_read_iter+0x114/0x190\n[130747.338152]  ext4_file_read_iter+0x5c/0x140 [ext4]\n[130747.338556]  __vfs_read+0x11c/0x188\n[130747.338851]  vfs_read+0x94/0x150\n[130747.339110]  ksys_read+0x74/0xf0\n\nThis patch's modification is according to Jan Kara's suggestion in:\nhttps://patchwork.ozlabs.org/project/linux-ext4/patch/20210428085158.3728201-1-yebin10@huawei.com/\n\"I see. Now I understand your patch. Honestly, seeing how fragile is trying\nto fix extent tree after split has failed in the middle, I would probably\ngo even further and make sure we fix the tree properly in case of ENOSPC\nand EDQUOT (those are easily user triggerable).  Anything else indicates a\nHW problem or fs corruption so I'd rather leave the extent tree as is and\ndon't try to fix it (which also means we will not create overlapping\nextents).\"",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47117",
               url: "https://www.suse.com/security/cve/CVE-2021-47117",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221575 for CVE-2021-47117",
               url: "https://bugzilla.suse.com/1221575",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47117",
      },
      {
         cve: "CVE-2021-47118",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47118",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npid: take a reference when initializing `cad_pid`\n\nDuring boot, kernel_init_freeable() initializes `cad_pid` to the init\ntask's struct pid.  Later on, we may change `cad_pid` via a sysctl, and\nwhen this happens proc_do_cad_pid() will increment the refcount on the\nnew pid via get_pid(), and will decrement the refcount on the old pid\nvia put_pid().  As we never called get_pid() when we initialized\n`cad_pid`, we decrement a reference we never incremented, can therefore\nfree the init task's struct pid early.  As there can be dangling\nreferences to the struct pid, we can later encounter a use-after-free\n(e.g.  when delivering signals).\n\nThis was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to\nhave been around since the conversion of `cad_pid` to struct pid in\ncommit 9ec52099e4b8 (\"[PATCH] replace cad_pid by a struct pid\") from the\npre-KASAN stone age of v2.6.19.\n\nFix this by getting a reference to the init task's struct pid when we\nassign it to `cad_pid`.\n\nFull KASAN splat below.\n\n   ==================================================================\n   BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline]\n   BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509\n   Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273\n\n   CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1\n   Hardware name: linux,dummy-virt (DT)\n   Call trace:\n    ns_of_pid include/linux/pid.h:153 [inline]\n    task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509\n    do_notify_parent+0x308/0xe60 kernel/signal.c:1950\n    exit_notify kernel/exit.c:682 [inline]\n    do_exit+0x2334/0x2bd0 kernel/exit.c:845\n    do_group_exit+0x108/0x2c8 kernel/exit.c:922\n    get_signal+0x4e4/0x2a88 kernel/signal.c:2781\n    do_signal arch/arm64/kernel/signal.c:882 [inline]\n    do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936\n    work_pending+0xc/0x2dc\n\n   Allocated by task 0:\n    slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516\n    slab_alloc_node mm/slub.c:2907 [inline]\n    slab_alloc mm/slub.c:2915 [inline]\n    kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920\n    alloc_pid+0xdc/0xc00 kernel/pid.c:180\n    copy_process+0x2794/0x5e18 kernel/fork.c:2129\n    kernel_clone+0x194/0x13c8 kernel/fork.c:2500\n    kernel_thread+0xd4/0x110 kernel/fork.c:2552\n    rest_init+0x44/0x4a0 init/main.c:687\n    arch_call_rest_init+0x1c/0x28\n    start_kernel+0x520/0x554 init/main.c:1064\n    0x0\n\n   Freed by task 270:\n    slab_free_hook mm/slub.c:1562 [inline]\n    slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600\n    slab_free mm/slub.c:3161 [inline]\n    kmem_cache_free+0x224/0x8e0 mm/slub.c:3177\n    put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114\n    put_pid+0x30/0x48 kernel/pid.c:109\n    proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401\n    proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591\n    proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617\n    call_write_iter include/linux/fs.h:1977 [inline]\n    new_sync_write+0x3ac/0x510 fs/read_write.c:518\n    vfs_write fs/read_write.c:605 [inline]\n    vfs_write+0x9c4/0x1018 fs/read_write.c:585\n    ksys_write+0x124/0x240 fs/read_write.c:658\n    __do_sys_write fs/read_write.c:670 [inline]\n    __se_sys_write fs/read_write.c:667 [inline]\n    __arm64_sys_write+0x78/0xb0 fs/read_write.c:667\n    __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline]\n    invoke_syscall arch/arm64/kernel/syscall.c:49 [inline]\n    el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129\n    do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168\n    el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416\n    el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432\n    el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701\n\n   The buggy address belongs to the object at ffff23794dda0000\n    which belongs to the cache pid of size 224\n   The buggy address is located 4 bytes inside of\n    224-byte region [ff\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47118",
               url: "https://www.suse.com/security/cve/CVE-2021-47118",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221605 for CVE-2021-47118",
               url: "https://bugzilla.suse.com/1221605",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47118",
      },
      {
         cve: "CVE-2021-47119",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47119",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix memory leak in ext4_fill_super\n\nBuffer head references must be released before calling kill_bdev();\notherwise the buffer head (and its page referenced by b_data) will not\nbe freed by kill_bdev, and subsequently that bh will be leaked.\n\nIf blocksizes differ, sb_set_blocksize() will kill current buffers and\npage cache by using kill_bdev(). And then super block will be reread\nagain but using correct blocksize this time. sb_set_blocksize() didn't\nfully free superblock page and buffer head, and being busy, they were\nnot freed and instead leaked.\n\nThis can easily be reproduced by calling an infinite loop of:\n\n  systemctl start <ext4_on_lvm>.mount, and\n  systemctl stop <ext4_on_lvm>.mount\n\n... since systemd creates a cgroup for each slice which it mounts, and\nthe bh leak get amplified by a dying memory cgroup that also never\ngets freed, and memory consumption is much more easily noticed.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47119",
               url: "https://www.suse.com/security/cve/CVE-2021-47119",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221608 for CVE-2021-47119",
               url: "https://bugzilla.suse.com/1221608",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47119",
      },
      {
         cve: "CVE-2021-47138",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47138",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ncxgb4: avoid accessing registers when clearing filters\n\nHardware register having the server TID base can contain\ninvalid values when adapter is in bad state (for example,\ndue to AER fatal error). Reading these invalid values in the\nregister can lead to out-of-bound memory access. So, fix\nby using the saved server TID base when clearing filters.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47138",
               url: "https://www.suse.com/security/cve/CVE-2021-47138",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221934 for CVE-2021-47138",
               url: "https://bugzilla.suse.com/1221934",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47138",
      },
      {
         cve: "CVE-2021-47141",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47141",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: Add NULL pointer checks when freeing irqs.\n\nWhen freeing notification blocks, we index priv->msix_vectors.\nIf we failed to allocate priv->msix_vectors (see abort_with_msix_vectors)\nthis could lead to a NULL pointer dereference if the driver is unloaded.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47141",
               url: "https://www.suse.com/security/cve/CVE-2021-47141",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221949 for CVE-2021-47141",
               url: "https://bugzilla.suse.com/1221949",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47141",
      },
      {
         cve: "CVE-2021-47142",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47142",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix a use-after-free\n\nlooks like we forget to set ttm->sg to NULL.\nHit panic below\n\n[ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI\n[ 1235.989074] Call Trace:\n[ 1235.991751]  sg_free_table+0x17/0x20\n[ 1235.995667]  amdgpu_ttm_backend_unbind.cold+0x4d/0xf7 [amdgpu]\n[ 1236.002288]  amdgpu_ttm_backend_destroy+0x29/0x130 [amdgpu]\n[ 1236.008464]  ttm_tt_destroy+0x1e/0x30 [ttm]\n[ 1236.013066]  ttm_bo_cleanup_memtype_use+0x51/0xa0 [ttm]\n[ 1236.018783]  ttm_bo_release+0x262/0xa50 [ttm]\n[ 1236.023547]  ttm_bo_put+0x82/0xd0 [ttm]\n[ 1236.027766]  amdgpu_bo_unref+0x26/0x50 [amdgpu]\n[ 1236.032809]  amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0x7aa/0xd90 [amdgpu]\n[ 1236.040400]  kfd_ioctl_alloc_memory_of_gpu+0xe2/0x330 [amdgpu]\n[ 1236.046912]  kfd_ioctl+0x463/0x690 [amdgpu]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47142",
               url: "https://www.suse.com/security/cve/CVE-2021-47142",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221952 for CVE-2021-47142",
               url: "https://bugzilla.suse.com/1221952",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47142",
      },
      {
         cve: "CVE-2021-47143",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47143",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: remove device from smcd_dev_list after failed device_add()\n\nIf the device_add() for a smcd_dev fails, there's no cleanup step that\nrolls back the earlier list_add(). The device subsequently gets freed,\nand we end up with a corrupted list.\n\nAdd some error handling that removes the device from the list.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47143",
               url: "https://www.suse.com/security/cve/CVE-2021-47143",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221988 for CVE-2021-47143",
               url: "https://bugzilla.suse.com/1221988",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47143",
      },
      {
         cve: "CVE-2021-47146",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47146",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmld: fix panic in mld_newpack()\n\nmld_newpack() doesn't allow to allocate high order page,\nonly order-0 allocation is allowed.\nIf headroom size is too large, a kernel panic could occur in skb_put().\n\nTest commands:\n    ip netns del A\n    ip netns del B\n    ip netns add A\n    ip netns add B\n    ip link add veth0 type veth peer name veth1\n    ip link set veth0 netns A\n    ip link set veth1 netns B\n\n    ip netns exec A ip link set lo up\n    ip netns exec A ip link set veth0 up\n    ip netns exec A ip -6 a a 2001:db8:0::1/64 dev veth0\n    ip netns exec B ip link set lo up\n    ip netns exec B ip link set veth1 up\n    ip netns exec B ip -6 a a 2001:db8:0::2/64 dev veth1\n    for i in {1..99}\n    do\n        let A=$i-1\n        ip netns exec A ip link add ip6gre$i type ip6gre \\\n\tlocal 2001:db8:$A::1 remote 2001:db8:$A::2 encaplimit 100\n        ip netns exec A ip -6 a a 2001:db8:$i::1/64 dev ip6gre$i\n        ip netns exec A ip link set ip6gre$i up\n\n        ip netns exec B ip link add ip6gre$i type ip6gre \\\n\tlocal 2001:db8:$A::2 remote 2001:db8:$A::1 encaplimit 100\n        ip netns exec B ip -6 a a 2001:db8:$i::2/64 dev ip6gre$i\n        ip netns exec B ip link set ip6gre$i up\n    done\n\nSplat looks like:\nkernel BUG at net/core/skbuff.c:110!\ninvalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN PTI\nCPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.12.0+ #891\nWorkqueue: ipv6_addrconf addrconf_dad_work\nRIP: 0010:skb_panic+0x15d/0x15f\nCode: 92 fe 4c 8b 4c 24 10 53 8b 4d 70 45 89 e0 48 c7 c7 00 ae 79 83\n41 57 41 56 41 55 48 8b 54 24 a6 26 f9 ff <0f> 0b 48 8b 6c 24 20 89\n34 24 e8 4a 4e 92 fe 8b 34 24 48 c7 c1 20\nRSP: 0018:ffff88810091f820 EFLAGS: 00010282\nRAX: 0000000000000089 RBX: ffff8881086e9000 RCX: 0000000000000000\nRDX: 0000000000000089 RSI: 0000000000000008 RDI: ffffed1020123efb\nRBP: ffff888005f6eac0 R08: ffffed1022fc0031 R09: ffffed1022fc0031\nR10: ffff888117e00187 R11: ffffed1022fc0030 R12: 0000000000000028\nR13: ffff888008284eb0 R14: 0000000000000ed8 R15: 0000000000000ec0\nFS:  0000000000000000(0000) GS:ffff888117c00000(0000)\nknlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f8b801c5640 CR3: 0000000033c2c006 CR4: 00000000003706f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n ? ip6_mc_hdr.isra.26.constprop.46+0x12a/0x600\n ? ip6_mc_hdr.isra.26.constprop.46+0x12a/0x600\n skb_put.cold.104+0x22/0x22\n ip6_mc_hdr.isra.26.constprop.46+0x12a/0x600\n ? rcu_read_lock_sched_held+0x91/0xc0\n mld_newpack+0x398/0x8f0\n ? ip6_mc_hdr.isra.26.constprop.46+0x600/0x600\n ? lock_contended+0xc40/0xc40\n add_grhead.isra.33+0x280/0x380\n add_grec+0x5ca/0xff0\n ? mld_sendpack+0xf40/0xf40\n ? lock_downgrade+0x690/0x690\n mld_send_initial_cr.part.34+0xb9/0x180\n ipv6_mc_dad_complete+0x15d/0x1b0\n addrconf_dad_completed+0x8d2/0xbb0\n ? lock_downgrade+0x690/0x690\n ? addrconf_rs_timer+0x660/0x660\n ? addrconf_dad_work+0x73c/0x10e0\n addrconf_dad_work+0x73c/0x10e0\n\nAllowing high order page allocation could fix this problem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47146",
               url: "https://www.suse.com/security/cve/CVE-2021-47146",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221979 for CVE-2021-47146",
               url: "https://bugzilla.suse.com/1221979",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47146",
      },
      {
         cve: "CVE-2021-47149",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47149",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fujitsu: fix potential null-ptr-deref\n\nIn fmvj18x_get_hwinfo(), if ioremap fails there will be NULL pointer\nderef. To fix this, check the return value of ioremap and return -1\nto the caller in case of failure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47149",
               url: "https://www.suse.com/security/cve/CVE-2021-47149",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221972 for CVE-2021-47149",
               url: "https://bugzilla.suse.com/1221972",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47149",
      },
      {
         cve: "CVE-2021-47150",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47150",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: fix the potential memory leak in fec_enet_init()\n\nIf the memory allocated for cbd_base is failed, it should\nfree the memory allocated for the queues, otherwise it causes\nmemory leak.\n\nAnd if the memory allocated for the queues is failed, it can\nreturn error directly.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47150",
               url: "https://www.suse.com/security/cve/CVE-2021-47150",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221973 for CVE-2021-47150",
               url: "https://bugzilla.suse.com/1221973",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47150",
      },
      {
         cve: "CVE-2021-47153",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47153",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: i801: Don't generate an interrupt on bus reset\n\nNow that the i2c-i801 driver supports interrupts, setting the KILL bit\nin a attempt to recover from a timed out transaction triggers an\ninterrupt. Unfortunately, the interrupt handler (i801_isr) is not\nprepared for this situation and will try to process the interrupt as\nif it was signaling the end of a successful transaction. In the case\nof a block transaction, this can result in an out-of-range memory\naccess.\n\nThis condition was reproduced several times by syzbot:\nhttps://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e\nhttps://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e\nhttps://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e\nhttps://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb\nhttps://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a\nhttps://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79\n\nSo disable interrupts while trying to reset the bus. Interrupts will\nbe enabled again for the following transaction.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47153",
               url: "https://www.suse.com/security/cve/CVE-2021-47153",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221969 for CVE-2021-47153",
               url: "https://bugzilla.suse.com/1221969",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47153",
      },
      {
         cve: "CVE-2021-47159",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47159",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: fix a crash if ->get_sset_count() fails\n\nIf ds->ops->get_sset_count() fails then it \"count\" is a negative error\ncode such as -EOPNOTSUPP.  Because \"i\" is an unsigned int, the negative\nerror code is type promoted to a very high value and the loop will\ncorrupt memory until the system crashes.\n\nFix this by checking for error codes and changing the type of \"i\" to\njust int.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47159",
               url: "https://www.suse.com/security/cve/CVE-2021-47159",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221967 for CVE-2021-47159",
               url: "https://bugzilla.suse.com/1221967",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47159",
      },
      {
         cve: "CVE-2021-47161",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47161",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-fsl-dspi: Fix a resource leak in an error handling path\n\n'dspi_request_dma()' should be undone by a 'dspi_release_dma()' call in the\nerror handling path of the probe function, as already done in the remove\nfunction",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47161",
               url: "https://www.suse.com/security/cve/CVE-2021-47161",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221966 for CVE-2021-47161",
               url: "https://bugzilla.suse.com/1221966",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47161",
      },
      {
         cve: "CVE-2021-47162",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47162",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: skb_linearize the head skb when reassembling msgs\n\nIt's not a good idea to append the frag skb to a skb's frag_list if\nthe frag_list already has skbs from elsewhere, such as this skb was\ncreated by pskb_copy() where the frag_list was cloned (all the skbs\nin it were skb_get'ed) and shared by multiple skbs.\n\nHowever, the new appended frag skb should have been only seen by the\ncurrent skb. Otherwise, it will cause use after free crashes as this\nappended frag skb are seen by multiple skbs but it only got skb_get\ncalled once.\n\nThe same thing happens with a skb updated by pskb_may_pull() with a\nskb_cloned skb. Li Shuang has reported quite a few crashes caused\nby this when doing testing over macvlan devices:\n\n  [] kernel BUG at net/core/skbuff.c:1970!\n  [] Call Trace:\n  []  skb_clone+0x4d/0xb0\n  []  macvlan_broadcast+0xd8/0x160 [macvlan]\n  []  macvlan_process_broadcast+0x148/0x150 [macvlan]\n  []  process_one_work+0x1a7/0x360\n  []  worker_thread+0x30/0x390\n\n  [] kernel BUG at mm/usercopy.c:102!\n  [] Call Trace:\n  []  __check_heap_object+0xd3/0x100\n  []  __check_object_size+0xff/0x16b\n  []  simple_copy_to_iter+0x1c/0x30\n  []  __skb_datagram_iter+0x7d/0x310\n  []  __skb_datagram_iter+0x2a5/0x310\n  []  skb_copy_datagram_iter+0x3b/0x90\n  []  tipc_recvmsg+0x14a/0x3a0 [tipc]\n  []  ____sys_recvmsg+0x91/0x150\n  []  ___sys_recvmsg+0x7b/0xc0\n\n  [] kernel BUG at mm/slub.c:305!\n  [] Call Trace:\n  []  <IRQ>\n  []  kmem_cache_free+0x3ff/0x400\n  []  __netif_receive_skb_core+0x12c/0xc40\n  []  ? kmem_cache_alloc+0x12e/0x270\n  []  netif_receive_skb_internal+0x3d/0xb0\n  []  ? get_rx_page_info+0x8e/0xa0 [be2net]\n  []  be_poll+0x6ef/0xd00 [be2net]\n  []  ? irq_exit+0x4f/0x100\n  []  net_rx_action+0x149/0x3b0\n\n  ...\n\nThis patch is to fix it by linearizing the head skb if it has frag_list\nset in tipc_buf_append(). Note that we choose to do this before calling\nskb_unshare(), as __skb_linearize() will avoid skb_copy(). Also, we can\nnot just drop the frag_list either as the early time.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47162",
               url: "https://www.suse.com/security/cve/CVE-2021-47162",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221977 for CVE-2021-47162",
               url: "https://bugzilla.suse.com/1221977",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47162",
      },
      {
         cve: "CVE-2021-47165",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47165",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/meson: fix shutdown crash when component not probed\n\nWhen main component is not probed, by example when the dw-hdmi module is\nnot loaded yet or in probe defer, the following crash appears on shutdown:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000038\n...\npc : meson_drv_shutdown+0x24/0x50\nlr : platform_drv_shutdown+0x20/0x30\n...\nCall trace:\nmeson_drv_shutdown+0x24/0x50\nplatform_drv_shutdown+0x20/0x30\ndevice_shutdown+0x158/0x360\nkernel_restart_prepare+0x38/0x48\nkernel_restart+0x18/0x68\n__do_sys_reboot+0x224/0x250\n__arm64_sys_reboot+0x24/0x30\n...\n\nSimply check if the priv struct has been allocated before using it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47165",
               url: "https://www.suse.com/security/cve/CVE-2021-47165",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221965 for CVE-2021-47165",
               url: "https://bugzilla.suse.com/1221965",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47165",
      },
      {
         cve: "CVE-2021-47166",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47166",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()\n\nThe value of mirror->pg_bytes_written should only be updated after a\nsuccessful attempt to flush out the requests on the list.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47166",
               url: "https://www.suse.com/security/cve/CVE-2021-47166",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221998 for CVE-2021-47166",
               url: "https://bugzilla.suse.com/1221998",
            },
            {
               category: "external",
               summary: "SUSE Bug 1224785 for CVE-2021-47166",
               url: "https://bugzilla.suse.com/1224785",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47166",
      },
      {
         cve: "CVE-2021-47167",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47167",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix an Oopsable condition in __nfs_pageio_add_request()\n\nEnsure that nfs_pageio_error_cleanup() resets the mirror array contents,\nso that the structure reflects the fact that it is now empty.\nAlso change the test in nfs_pageio_do_add_request() to be more robust by\nchecking whether or not the list is empty rather than relying on the\nvalue of pg_count.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47167",
               url: "https://www.suse.com/security/cve/CVE-2021-47167",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221991 for CVE-2021-47167",
               url: "https://bugzilla.suse.com/1221991",
            },
            {
               category: "external",
               summary: "SUSE Bug 1224785 for CVE-2021-47167",
               url: "https://bugzilla.suse.com/1224785",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47167",
      },
      {
         cve: "CVE-2021-47168",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47168",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: fix an incorrect limit in filelayout_decode_layout()\n\nThe \"sizeof(struct nfs_fh)\" is two bytes too large and could lead to\nmemory corruption.  It should be NFS_MAXFHSIZE because that's the size\nof the ->data[] buffer.\n\nI reversed the size of the arguments to put the variable on the left.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47168",
               url: "https://www.suse.com/security/cve/CVE-2021-47168",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222002 for CVE-2021-47168",
               url: "https://bugzilla.suse.com/1222002",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47168",
      },
      {
         cve: "CVE-2021-47169",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47169",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'\n\nIn 'rp2_probe', the driver registers 'rp2_uart_interrupt' then calls\n'rp2_fw_cb' through 'request_firmware_nowait'. In 'rp2_fw_cb', if the\nfirmware don't exists, function just return without initializing ports\nof 'rp2_card'. But now the interrupt handler function has been\nregistered, and when an interrupt comes, 'rp2_uart_interrupt' may access\nthose ports then causing NULL pointer dereference or other bugs.\n\nBecause the driver does some initialization work in 'rp2_fw_cb', in\norder to make the driver ready to handle interrupts, 'request_firmware'\nshould be used instead of asynchronous 'request_firmware_nowait'.\n\nThis report reveals it:\n\nINFO: trying to register non-static key.\nthe code is fine but needs lockdep annotation.\nturning off the locking correctness validator.\nCPU: 2 PID: 0 Comm: swapper/2 Not tainted 4.19.177-gdba4159c14ef-dirty #45\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-\ngc9ba5276e321-prebuilt.qemu.org 04/01/2014\nCall Trace:\n <IRQ>\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0xec/0x156 lib/dump_stack.c:118\n assign_lock_key kernel/locking/lockdep.c:727 [inline]\n register_lock_class+0x14e5/0x1ba0 kernel/locking/lockdep.c:753\n __lock_acquire+0x187/0x3750 kernel/locking/lockdep.c:3303\n lock_acquire+0x124/0x340 kernel/locking/lockdep.c:3907\n __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]\n _raw_spin_lock+0x32/0x50 kernel/locking/spinlock.c:144\n spin_lock include/linux/spinlock.h:329 [inline]\n rp2_ch_interrupt drivers/tty/serial/rp2.c:466 [inline]\n rp2_asic_interrupt.isra.9+0x15d/0x990 drivers/tty/serial/rp2.c:493\n rp2_uart_interrupt+0x49/0xe0 drivers/tty/serial/rp2.c:504\n __handle_irq_event_percpu+0xfb/0x770 kernel/irq/handle.c:149\n handle_irq_event_percpu+0x79/0x150 kernel/irq/handle.c:189\n handle_irq_event+0xac/0x140 kernel/irq/handle.c:206\n handle_fasteoi_irq+0x232/0x5c0 kernel/irq/chip.c:725\n generic_handle_irq_desc include/linux/irqdesc.h:155 [inline]\n handle_irq+0x230/0x3a0 arch/x86/kernel/irq_64.c:87\n do_IRQ+0xa7/0x1e0 arch/x86/kernel/irq.c:247\n common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:670\n </IRQ>\nRIP: 0010:native_safe_halt+0x28/0x30 arch/x86/include/asm/irqflags.h:61\nCode: 00 00 55 be 04 00 00 00 48 c7 c7 00 c2 2f 8c 48 89 e5 e8 fb 31 e7 f8\n8b 05 75 af 8d 03 85 c0 7e 07 0f 00 2d 8a 61 65 00 fb f4 <5d> c3 90 90 90\n90 90 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41\nRSP: 0018:ffff88806b71fcc8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffde\nRAX: 0000000000000000 RBX: ffffffff8bde7e48 RCX: ffffffff88a21285\nRDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c2fc200\nRBP: ffff88806b71fcc8 R08: fffffbfff185f840 R09: fffffbfff185f840\nR10: 0000000000000001 R11: fffffbfff185f840 R12: 0000000000000002\nR13: ffffffff8bea18a0 R14: 0000000000000000 R15: 0000000000000000\n arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]\n default_idle+0x6f/0x360 arch/x86/kernel/process.c:557\n arch_cpu_idle+0xf/0x20 arch/x86/kernel/process.c:548\n default_idle_call+0x3b/0x60 kernel/sched/idle.c:93\n cpuidle_idle_call kernel/sched/idle.c:153 [inline]\n do_idle+0x2ab/0x3c0 kernel/sched/idle.c:263\n cpu_startup_entry+0xcb/0xe0 kernel/sched/idle.c:369\n start_secondary+0x3b8/0x4e0 arch/x86/kernel/smpboot.c:271\n secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000010\nPGD 8000000056d27067 P4D 8000000056d27067 PUD 56d28067 PMD 0\nOops: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 2 PID: 0 Comm: swapper/2 Not tainted 4.19.177-gdba4159c14ef-dirty #45\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-\ngc9ba5276e321-prebuilt.qemu.org 04/01/2014\nRIP: 0010:readl arch/x86/include/asm/io.h:59 [inline]\nRIP: 0010:rp2_ch_interrupt drivers/tty/serial/rp2.c:472 [inline]\nRIP: 0010:rp2_asic_interrupt.isra.9+0x181/0x990 drivers/tty/serial/rp2.c:\n493\nCo\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47169",
               url: "https://www.suse.com/security/cve/CVE-2021-47169",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222000 for CVE-2021-47169",
               url: "https://bugzilla.suse.com/1222000",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47169",
      },
      {
         cve: "CVE-2021-47171",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47171",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: fix memory leak in smsc75xx_bind\n\nSyzbot reported memory leak in smsc75xx_bind().\nThe problem was is non-freed memory in case of\nerrors after memory allocation.\n\nbacktrace:\n  [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline]\n  [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline]\n  [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460\n  [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47171",
               url: "https://www.suse.com/security/cve/CVE-2021-47171",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221994 for CVE-2021-47171",
               url: "https://bugzilla.suse.com/1221994",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47171",
      },
      {
         cve: "CVE-2021-47173",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47173",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc/uss720: fix memory leak in uss720_probe\n\nuss720_probe forgets to decrease the refcount of usbdev in uss720_probe.\nFix this by decreasing the refcount of usbdev by usb_put_dev.\n\nBUG: memory leak\nunreferenced object 0xffff888101113800 (size 2048):\n  comm \"kworker/0:1\", pid 7, jiffies 4294956777 (age 28.870s)\n  hex dump (first 32 bytes):\n    ff ff ff ff 31 00 00 00 00 00 00 00 00 00 00 00  ....1...........\n    00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00  ................\n  backtrace:\n    [<ffffffff82b8e822>] kmalloc include/linux/slab.h:554 [inline]\n    [<ffffffff82b8e822>] kzalloc include/linux/slab.h:684 [inline]\n    [<ffffffff82b8e822>] usb_alloc_dev+0x32/0x450 drivers/usb/core/usb.c:582\n    [<ffffffff82b98441>] hub_port_connect drivers/usb/core/hub.c:5129 [inline]\n    [<ffffffff82b98441>] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline]\n    [<ffffffff82b98441>] port_event drivers/usb/core/hub.c:5509 [inline]\n    [<ffffffff82b98441>] hub_event+0x1171/0x20c0 drivers/usb/core/hub.c:5591\n    [<ffffffff81259229>] process_one_work+0x2c9/0x600 kernel/workqueue.c:2275\n    [<ffffffff81259b19>] worker_thread+0x59/0x5d0 kernel/workqueue.c:2421\n    [<ffffffff81261228>] kthread+0x178/0x1b0 kernel/kthread.c:292\n    [<ffffffff8100227f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47173",
               url: "https://www.suse.com/security/cve/CVE-2021-47173",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221993 for CVE-2021-47173",
               url: "https://bugzilla.suse.com/1221993",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47173",
      },
      {
         cve: "CVE-2021-47177",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47177",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Fix sysfs leak in alloc_iommu()\n\niommu_device_sysfs_add() is called before, so is has to be cleaned on subsequent\nerrors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47177",
               url: "https://www.suse.com/security/cve/CVE-2021-47177",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221997 for CVE-2021-47177",
               url: "https://bugzilla.suse.com/1221997",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47177",
      },
      {
         cve: "CVE-2021-47179",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47179",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()\n\nCommit de144ff4234f changes _pnfs_return_layout() to call\npnfs_mark_matching_lsegs_return() passing NULL as the struct\npnfs_layout_range argument. Unfortunately,\npnfs_mark_matching_lsegs_return() doesn't check if we have a value here\nbefore dereferencing it, causing an oops.\n\nI'm able to hit this crash consistently when running connectathon basic\ntests on NFS v4.1/v4.2 against Ontap.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47179",
               url: "https://www.suse.com/security/cve/CVE-2021-47179",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222001 for CVE-2021-47179",
               url: "https://bugzilla.suse.com/1222001",
            },
            {
               category: "external",
               summary: "SUSE Bug 1224785 for CVE-2021-47179",
               url: "https://bugzilla.suse.com/1224785",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47179",
      },
      {
         cve: "CVE-2021-47180",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47180",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: nci: fix memory leak in nci_allocate_device\n\nnfcmrvl_disconnect fails to free the hci_dev field in struct nci_dev.\nFix this by freeing hci_dev in nci_free_device.\n\nBUG: memory leak\nunreferenced object 0xffff888111ea6800 (size 1024):\n  comm \"kworker/1:0\", pid 19, jiffies 4294942308 (age 13.580s)\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 60 fd 0c 81 88 ff ff  .........`......\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<000000004bc25d43>] kmalloc include/linux/slab.h:552 [inline]\n    [<000000004bc25d43>] kzalloc include/linux/slab.h:682 [inline]\n    [<000000004bc25d43>] nci_hci_allocate+0x21/0xd0 net/nfc/nci/hci.c:784\n    [<00000000c59cff92>] nci_allocate_device net/nfc/nci/core.c:1170 [inline]\n    [<00000000c59cff92>] nci_allocate_device+0x10b/0x160 net/nfc/nci/core.c:1132\n    [<00000000006e0a8e>] nfcmrvl_nci_register_dev+0x10a/0x1c0 drivers/nfc/nfcmrvl/main.c:153\n    [<000000004da1b57e>] nfcmrvl_probe+0x223/0x290 drivers/nfc/nfcmrvl/usb.c:345\n    [<00000000d506aed9>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396\n    [<00000000bc632c92>] really_probe+0x159/0x4a0 drivers/base/dd.c:554\n    [<00000000f5009125>] driver_probe_device+0x84/0x100 drivers/base/dd.c:740\n    [<000000000ce658ca>] __device_attach_driver+0xee/0x110 drivers/base/dd.c:846\n    [<000000007067d05f>] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:431\n    [<00000000f8e13372>] __device_attach+0x122/0x250 drivers/base/dd.c:914\n    [<000000009cf68860>] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:491\n    [<00000000359c965a>] device_add+0x5be/0xc30 drivers/base/core.c:3109\n    [<00000000086e4bd3>] usb_set_configuration+0x9d9/0xb90 drivers/usb/core/message.c:2164\n    [<00000000ca036872>] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238\n    [<00000000d40d36f6>] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293\n    [<00000000bc632c92>] really_probe+0x159/0x4a0 drivers/base/dd.c:554",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47180",
               url: "https://www.suse.com/security/cve/CVE-2021-47180",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221999 for CVE-2021-47180",
               url: "https://bugzilla.suse.com/1221999",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47180",
      },
      {
         cve: "CVE-2021-47181",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47181",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: tusb6010: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47181",
               url: "https://www.suse.com/security/cve/CVE-2021-47181",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222660 for CVE-2021-47181",
               url: "https://bugzilla.suse.com/1222660",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47181",
      },
      {
         cve: "CVE-2021-47182",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47182",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Fix scsi_mode_sense() buffer length handling\n\nSeveral problems exist with scsi_mode_sense() buffer length handling:\n\n 1) The allocation length field of the MODE SENSE(10) command is 16-bits,\n    occupying bytes 7 and 8 of the CDB. With this command, access to mode\n    pages larger than 255 bytes is thus possible. However, the CDB\n    allocation length field is set by assigning len to byte 8 only, thus\n    truncating buffer length larger than 255.\n\n 2) If scsi_mode_sense() is called with len smaller than 8 with\n    sdev->use_10_for_ms set, or smaller than 4 otherwise, the buffer length\n    is increased to 8 and 4 respectively, and the buffer is zero filled\n    with these increased values, thus corrupting the memory following the\n    buffer.\n\nFix these 2 problems by using put_unaligned_be16() to set the allocation\nlength field of MODE SENSE(10) CDB and by returning an error when len is\ntoo small.\n\nFurthermore, if len is larger than 255B, always try MODE SENSE(10) first,\neven if the device driver did not set sdev->use_10_for_ms. In case of\ninvalid opcode error for MODE SENSE(10), access to mode pages larger than\n255 bytes are not retried using MODE SENSE(6). To avoid buffer length\noverflows for the MODE_SENSE(10) case, check that len is smaller than 65535\nbytes.\n\nWhile at it, also fix the folowing:\n\n * Use get_unaligned_be16() to retrieve the mode data length and block\n   descriptor length fields of the mode sense reply header instead of using\n   an open coded calculation.\n\n * Fix the kdoc dbd argument explanation: the DBD bit stands for Disable\n   Block Descriptor, which is the opposite of what the dbd argument\n   description was.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47182",
               url: "https://www.suse.com/security/cve/CVE-2021-47182",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222662 for CVE-2021-47182",
               url: "https://bugzilla.suse.com/1222662",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47182",
      },
      {
         cve: "CVE-2021-47183",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47183",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix link down processing to address NULL pointer dereference\n\nIf an FC link down transition while PLOGIs are outstanding to fabric well\nknown addresses, outstanding ABTS requests may result in a NULL pointer\ndereference. Driver unload requests may hang with repeated \"2878\" log\nmessages.\n\nThe Link down processing results in ABTS requests for outstanding ELS\nrequests. The Abort WQEs are sent for the ELSs before the driver had set\nthe link state to down. Thus the driver is sending the Abort with the\nexpectation that an ABTS will be sent on the wire. The Abort request is\nstalled waiting for the link to come up. In some conditions the driver may\nauto-complete the ELSs thus if the link does come up, the Abort completions\nmay reference an invalid structure.\n\nFix by ensuring that Abort set the flag to avoid link traffic if issued due\nto conditions where the link failed.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47183",
               url: "https://www.suse.com/security/cve/CVE-2021-47183",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222664 for CVE-2021-47183",
               url: "https://bugzilla.suse.com/1222664",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47183",
      },
      {
         cve: "CVE-2021-47184",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47184",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix NULL ptr dereference on VSI filter sync\n\nRemove the reason of null pointer dereference in sync VSI filters.\nAdded new I40E_VSI_RELEASING flag to signalize deleting and releasing\nof VSI resources to sync this thread with sync filters subtask.\nWithout this patch it is possible to start update the VSI filter list\nafter VSI is removed, that's causing a kernel oops.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47184",
               url: "https://www.suse.com/security/cve/CVE-2021-47184",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222666 for CVE-2021-47184",
               url: "https://bugzilla.suse.com/1222666",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47184",
      },
      {
         cve: "CVE-2021-47185",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47185",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: tty_buffer: Fix the softlockup issue in flush_to_ldisc\n\nWhen running ltp testcase(ltp/testcases/kernel/pty/pty04.c) with arm64, there is a soft lockup,\nwhich look like this one:\n\n  Workqueue: events_unbound flush_to_ldisc\n  Call trace:\n   dump_backtrace+0x0/0x1ec\n   show_stack+0x24/0x30\n   dump_stack+0xd0/0x128\n   panic+0x15c/0x374\n   watchdog_timer_fn+0x2b8/0x304\n   __run_hrtimer+0x88/0x2c0\n   __hrtimer_run_queues+0xa4/0x120\n   hrtimer_interrupt+0xfc/0x270\n   arch_timer_handler_phys+0x40/0x50\n   handle_percpu_devid_irq+0x94/0x220\n   __handle_domain_irq+0x88/0xf0\n   gic_handle_irq+0x84/0xfc\n   el1_irq+0xc8/0x180\n   slip_unesc+0x80/0x214 [slip]\n   tty_ldisc_receive_buf+0x64/0x80\n   tty_port_default_receive_buf+0x50/0x90\n   flush_to_ldisc+0xbc/0x110\n   process_one_work+0x1d4/0x4b0\n   worker_thread+0x180/0x430\n   kthread+0x11c/0x120\n\nIn the testcase pty04, The first process call the write syscall to send\ndata to the pty master. At the same time, the workqueue will do the\nflush_to_ldisc to pop data in a loop until there is no more data left.\nWhen the sender and workqueue running in different core, the sender sends\ndata fastly in full time which will result in workqueue doing work in loop\nfor a long time and occuring softlockup in flush_to_ldisc with kernel\nconfigured without preempt. So I add need_resched check and cond_resched\nin the flush_to_ldisc loop to avoid it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47185",
               url: "https://www.suse.com/security/cve/CVE-2021-47185",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222669 for CVE-2021-47185",
               url: "https://bugzilla.suse.com/1222669",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47185",
      },
      {
         cve: "CVE-2021-47188",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47188",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: Improve SCSI abort handling\n\nThe following has been observed on a test setup:\n\nWARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c\nCall trace:\n ufshcd_queuecommand+0x468/0x65c\n scsi_send_eh_cmnd+0x224/0x6a0\n scsi_eh_test_devices+0x248/0x418\n scsi_eh_ready_devs+0xc34/0xe58\n scsi_error_handler+0x204/0x80c\n kthread+0x150/0x1b4\n ret_from_fork+0x10/0x30\n\nThat warning is triggered by the following statement:\n\n\tWARN_ON(lrbp->cmd);\n\nFix this warning by clearing lrbp->cmd from the abort handler.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47188",
               url: "https://www.suse.com/security/cve/CVE-2021-47188",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222671 for CVE-2021-47188",
               url: "https://bugzilla.suse.com/1222671",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47188",
      },
      {
         cve: "CVE-2021-47189",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47189",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix memory ordering between normal and ordered work functions\n\nOrdered work functions aren't guaranteed to be handled by the same thread\nwhich executed the normal work functions. The only way execution between\nnormal/ordered functions is synchronized is via the WORK_DONE_BIT,\nunfortunately the used bitops don't guarantee any ordering whatsoever.\n\nThis manifested as seemingly inexplicable crashes on ARM64, where\nasync_chunk::inode is seen as non-null in async_cow_submit which causes\nsubmit_compressed_extents to be called and crash occurs because\nasync_chunk::inode suddenly became NULL. The call trace was similar to:\n\n    pc : submit_compressed_extents+0x38/0x3d0\n    lr : async_cow_submit+0x50/0xd0\n    sp : ffff800015d4bc20\n\n    <registers omitted for brevity>\n\n    Call trace:\n     submit_compressed_extents+0x38/0x3d0\n     async_cow_submit+0x50/0xd0\n     run_ordered_work+0xc8/0x280\n     btrfs_work_helper+0x98/0x250\n     process_one_work+0x1f0/0x4ac\n     worker_thread+0x188/0x504\n     kthread+0x110/0x114\n     ret_from_fork+0x10/0x18\n\nFix this by adding respective barrier calls which ensure that all\naccesses preceding setting of WORK_DONE_BIT are strictly ordered before\nsetting the flag. At the same time add a read barrier after reading of\nWORK_DONE_BIT in run_ordered_work which ensures all subsequent loads\nwould be strictly ordered after reading the bit. This in turn ensures\nare all accesses before WORK_DONE_BIT are going to be strictly ordered\nbefore any access that can occur in ordered_func.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47189",
               url: "https://www.suse.com/security/cve/CVE-2021-47189",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222706 for CVE-2021-47189",
               url: "https://bugzilla.suse.com/1222706",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47189",
      },
      {
         cve: "CVE-2021-47198",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47198",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine\n\nAn error is detected with the following report when unloading the driver:\n  \"KASAN: use-after-free in lpfc_unreg_rpi+0x1b1b\"\n\nThe NLP_REG_LOGIN_SEND nlp_flag is set in lpfc_reg_fab_ctrl_node(), but the\nflag is not cleared upon completion of the login.\n\nThis allows a second call to lpfc_unreg_rpi() to proceed with nlp_rpi set\nto LPFC_RPI_ALLOW_ERROR.  This results in a use after free access when used\nas an rpi_ids array index.\n\nFix by clearing the NLP_REG_LOGIN_SEND nlp_flag in\nlpfc_mbx_cmpl_fc_reg_login().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47198",
               url: "https://www.suse.com/security/cve/CVE-2021-47198",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222883 for CVE-2021-47198",
               url: "https://bugzilla.suse.com/1222883",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47198",
      },
      {
         cve: "CVE-2021-47202",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47202",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: Fix NULL pointer dereferences in of_thermal_ functions\n\nof_parse_thermal_zones() parses the thermal-zones node and registers a\nthermal_zone device for each subnode. However, if a thermal zone is\nconsuming a thermal sensor and that thermal sensor device hasn't probed\nyet, an attempt to set trip_point_*_temp for that thermal zone device\ncan cause a NULL pointer dereference. Fix it.\n\n console:/sys/class/thermal/thermal_zone87 # echo 120000 > trip_point_0_temp\n ...\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020\n ...\n Call trace:\n  of_thermal_set_trip_temp+0x40/0xc4\n  trip_point_temp_store+0xc0/0x1dc\n  dev_attr_store+0x38/0x88\n  sysfs_kf_write+0x64/0xc0\n  kernfs_fop_write_iter+0x108/0x1d0\n  vfs_write+0x2f4/0x368\n  ksys_write+0x7c/0xec\n  __arm64_sys_write+0x20/0x30\n  el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc\n  do_el0_svc+0x28/0xa0\n  el0_svc+0x14/0x24\n  el0_sync_handler+0x88/0xec\n  el0_sync+0x1c0/0x200\n\nWhile at it, fix the possible NULL pointer dereference in other\nfunctions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(),\nof_thermal_get_trend().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47202",
               url: "https://www.suse.com/security/cve/CVE-2021-47202",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222878 for CVE-2021-47202",
               url: "https://bugzilla.suse.com/1222878",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47202",
      },
      {
         cve: "CVE-2021-47203",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47203",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()\n\nWhen parsing the txq list in lpfc_drain_txq(), the driver attempts to pass\nthe requests to the adapter. If such an attempt fails, a local \"fail_msg\"\nstring is set and a log message output.  The job is then added to a\ncompletions list for cancellation.\n\nProcessing of any further jobs from the txq list continues, but since\n\"fail_msg\" remains set, jobs are added to the completions list regardless\nof whether a wqe was passed to the adapter.  If successfully added to\ntxcmplq, jobs are added to both lists resulting in list corruption.\n\nFix by clearing the fail_msg string after adding a job to the completions\nlist. This stops the subsequent jobs from being added to the completions\nlist unless they had an appropriate failure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47203",
               url: "https://www.suse.com/security/cve/CVE-2021-47203",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222881 for CVE-2021-47203",
               url: "https://bugzilla.suse.com/1222881",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47203",
      },
      {
         cve: "CVE-2021-47204",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47204",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dpaa2-eth: fix use-after-free in dpaa2_eth_remove\n\nAccess to netdev after free_netdev() will cause use-after-free bug.\nMove debug log before free_netdev() call to avoid it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47204",
               url: "https://www.suse.com/security/cve/CVE-2021-47204",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222787 for CVE-2021-47204",
               url: "https://bugzilla.suse.com/1222787",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47204",
      },
      {
         cve: "CVE-2021-47205",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47205",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: Unregister clocks/resets when unbinding\n\nCurrently, unbinding a CCU driver unmaps the device's MMIO region, while\nleaving its clocks/resets and their providers registered. This can cause\na page fault later when some clock operation tries to perform MMIO. Fix\nthis by separating the CCU initialization from the memory allocation,\nand then using a devres callback to unregister the clocks and resets.\n\nThis also fixes a memory leak of the `struct ccu_reset`, and uses the\ncorrect owner (the specific platform driver) for the clocks and resets.\n\nEarly OF clock providers are never unregistered, and limited error\nhandling is possible, so they are mostly unchanged. The error reporting\nis made more consistent by moving the message inside of_sunxi_ccu_probe.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47205",
               url: "https://www.suse.com/security/cve/CVE-2021-47205",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222888 for CVE-2021-47205",
               url: "https://bugzilla.suse.com/1222888",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47205",
      },
      {
         cve: "CVE-2021-47207",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47207",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: gus: fix null pointer dereference on pointer block\n\nThe pointer block return from snd_gf1_dma_next_block could be\nnull, so there is a potential null pointer dereference issue.\nFix this by adding a null check before dereference.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47207",
               url: "https://www.suse.com/security/cve/CVE-2021-47207",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222790 for CVE-2021-47207",
               url: "https://bugzilla.suse.com/1222790",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47207",
      },
      {
         cve: "CVE-2021-47211",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47211",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: fix null pointer dereference on pointer cs_desc\n\nThe pointer cs_desc return from snd_usb_find_clock_source could\nbe null, so there is a potential null pointer dereference issue.\nFix this by adding a null check before dereference.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47211",
               url: "https://www.suse.com/security/cve/CVE-2021-47211",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222869 for CVE-2021-47211",
               url: "https://bugzilla.suse.com/1222869",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47211",
      },
      {
         cve: "CVE-2021-47216",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47216",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: advansys: Fix kernel pointer leak\n\nPointers should be printed with %p or %px rather than cast to 'unsigned\nlong' and printed with %lx.\n\nChange %lx to %p to print the hashed pointer.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47216",
               url: "https://www.suse.com/security/cve/CVE-2021-47216",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222876 for CVE-2021-47216",
               url: "https://bugzilla.suse.com/1222876",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2021-47216",
      },
      {
         cve: "CVE-2021-47217",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-47217",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails\n\nCheck for a valid hv_vp_index array prior to derefencing hv_vp_index when\nsetting Hyper-V's TSC change callback.  If Hyper-V setup failed in\nhyperv_init(), the kernel will still report that it's running under\nHyper-V, but will have silently disabled nearly all functionality.\n\n  BUG: kernel NULL pointer dereference, address: 0000000000000010\n  #PF: supervisor read access in kernel mode\n  #PF: error_code(0x0000) - not-present page\n  PGD 0 P4D 0\n  Oops: 0000 [#1] SMP\n  CPU: 4 PID: 1 Comm: swapper/0 Not tainted 5.15.0-rc2+ #75\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n  RIP: 0010:set_hv_tscchange_cb+0x15/0xa0\n  Code: <8b> 04 82 8b 15 12 17 85 01 48 c1 e0 20 48 0d ee 00 01 00 f6 c6 08\n  ...\n  Call Trace:\n   kvm_arch_init+0x17c/0x280\n   kvm_init+0x31/0x330\n   vmx_init+0xba/0x13a\n   do_one_initcall+0x41/0x1c0\n   kernel_init_freeable+0x1f2/0x23b\n   kernel_init+0x16/0x120\n   ret_from_fork+0x22/0x30",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-47217",
               url: "https://www.suse.com/security/cve/CVE-2021-47217",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222836 for CVE-2021-47217",
               url: "https://bugzilla.suse.com/1222836",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-47217",
      },
      {
         cve: "CVE-2022-0487",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-0487",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-0487",
               url: "https://www.suse.com/security/cve/CVE-2022-0487",
            },
            {
               category: "external",
               summary: "SUSE Bug 1194516 for CVE-2022-0487",
               url: "https://bugzilla.suse.com/1194516",
            },
            {
               category: "external",
               summary: "SUSE Bug 1195949 for CVE-2022-0487",
               url: "https://bugzilla.suse.com/1195949",
            },
            {
               category: "external",
               summary: "SUSE Bug 1198615 for CVE-2022-0487",
               url: "https://bugzilla.suse.com/1198615",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-0487",
      },
      {
         cve: "CVE-2022-48619",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48619",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capability mishandles the situation in which an event code falls outside of a bitmap.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48619",
               url: "https://www.suse.com/security/cve/CVE-2022-48619",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218220 for CVE-2022-48619",
               url: "https://bugzilla.suse.com/1218220",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48619",
      },
      {
         cve: "CVE-2022-48626",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48626",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmoxart: fix potential use-after-free on remove path\n\nIt was reported that the mmc host structure could be accessed after it\nwas freed in moxart_remove(), so fix this by saving the base register of\nthe device and using it instead of the pointer dereference.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48626",
               url: "https://www.suse.com/security/cve/CVE-2022-48626",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220366 for CVE-2022-48626",
               url: "https://bugzilla.suse.com/1220366",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48626",
      },
      {
         cve: "CVE-2022-48636",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48636",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup\n\nFix Oops in dasd_alias_get_start_dev() function caused by the pavgroup\npointer being NULL.\n\nThe pavgroup pointer is checked on the entrance of the function but\nwithout the lcu->lock being held. Therefore there is a race window\nbetween dasd_alias_get_start_dev() and _lcu_update() which sets\npavgroup to NULL with the lcu->lock held.\n\nFix by checking the pavgroup pointer with lcu->lock held.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48636",
               url: "https://www.suse.com/security/cve/CVE-2022-48636",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223512 for CVE-2022-48636",
               url: "https://bugzilla.suse.com/1223512",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48636",
      },
      {
         cve: "CVE-2022-48650",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48650",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()\n\nCommit 8f394da36a36 (\"scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG\")\nmade the __qlt_24xx_handle_abts() function return early if\ntcm_qla2xxx_find_cmd_by_tag() didn't find a command, but it missed to clean\nup the allocated memory for the management command.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48650",
               url: "https://www.suse.com/security/cve/CVE-2022-48650",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223509 for CVE-2022-48650",
               url: "https://bugzilla.suse.com/1223509",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48650",
      },
      {
         cve: "CVE-2022-48651",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48651",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix out-of-bound bugs caused by unset skb->mac_header\n\nIf an AF_PACKET socket is used to send packets through ipvlan and the\ndefault xmit function of the AF_PACKET socket is changed from\ndev_queue_xmit() to packet_direct_xmit() via setsockopt() with the option\nname of PACKET_QDISC_BYPASS, the skb->mac_header may not be reset and\nremains as the initial value of 65535, this may trigger slab-out-of-bounds\nbugs as following:\n\n=================================================================\nUG: KASAN: slab-out-of-bounds in ipvlan_xmit_mode_l2+0xdb/0x330 [ipvlan]\nPU: 2 PID: 1768 Comm: raw_send Kdump: loaded Not tainted 6.0.0-rc4+ #6\nardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33\nall Trace:\nprint_address_description.constprop.0+0x1d/0x160\nprint_report.cold+0x4f/0x112\nkasan_report+0xa3/0x130\nipvlan_xmit_mode_l2+0xdb/0x330 [ipvlan]\nipvlan_start_xmit+0x29/0xa0 [ipvlan]\n__dev_direct_xmit+0x2e2/0x380\npacket_direct_xmit+0x22/0x60\npacket_snd+0x7c9/0xc40\nsock_sendmsg+0x9a/0xa0\n__sys_sendto+0x18a/0x230\n__x64_sys_sendto+0x74/0x90\ndo_syscall_64+0x3b/0x90\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe root cause is:\n  1. packet_snd() only reset skb->mac_header when sock->type is SOCK_RAW\n     and skb->protocol is not specified as in packet_parse_headers()\n\n  2. packet_direct_xmit() doesn't reset skb->mac_header as dev_queue_xmit()\n\nIn this case, skb->mac_header is 65535 when ipvlan_xmit_mode_l2() is\ncalled. So when ipvlan_xmit_mode_l2() gets mac header with eth_hdr() which\nuse \"skb->head + skb->mac_header\", out-of-bound access occurs.\n\nThis patch replaces eth_hdr() with skb_eth_hdr() in ipvlan_xmit_mode_l2()\nand reset mac header in multicast to solve this out-of-bound bug.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48651",
               url: "https://www.suse.com/security/cve/CVE-2022-48651",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223513 for CVE-2022-48651",
               url: "https://bugzilla.suse.com/1223513",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223514 for CVE-2022-48651",
               url: "https://bugzilla.suse.com/1223514",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-48651",
      },
      {
         cve: "CVE-2022-48667",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48667",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: fix temporary data corruption in insert range\n\ninsert range doesn't discard the affected cached region\nso can risk temporarily corrupting file data.\n\nAlso includes some minor cleanup (avoiding rereading\ninode size repeatedly unnecessarily) to make it clearer.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48667",
               url: "https://www.suse.com/security/cve/CVE-2022-48667",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223518 for CVE-2022-48667",
               url: "https://bugzilla.suse.com/1223518",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48667",
      },
      {
         cve: "CVE-2022-48668",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48668",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: fix temporary data corruption in collapse range\n\ncollapse range doesn't discard the affected cached region\nso can risk temporarily corrupting the file data. This\nfixes xfstest generic/031\n\nI also decided to merge a minor cleanup to this into the same patch\n(avoiding rereading inode size repeatedly unnecessarily) to make it\nclearer.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48668",
               url: "https://www.suse.com/security/cve/CVE-2022-48668",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223516 for CVE-2022-48668",
               url: "https://bugzilla.suse.com/1223516",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48668",
      },
      {
         cve: "CVE-2022-48687",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48687",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: fix out-of-bounds read when setting HMAC data.\n\nThe SRv6 layer allows defining HMAC data that can later be used to sign IPv6\nSegment Routing Headers. This configuration is realised via netlink through\nfour attributes: SEG6_ATTR_HMACKEYID, SEG6_ATTR_SECRET, SEG6_ATTR_SECRETLEN and\nSEG6_ATTR_ALGID. Because the SECRETLEN attribute is decoupled from the actual\nlength of the SECRET attribute, it is possible to provide invalid combinations\n(e.g., secret = \"\", secretlen = 64). This case is not checked in the code and\nwith an appropriately crafted netlink message, an out-of-bounds read of up\nto 64 bytes (max secret length) can occur past the skb end pointer and into\nskb_shared_info:\n\nBreakpoint 1, seg6_genl_sethmac (skb=<optimized out>, info=<optimized out>) at net/ipv6/seg6.c:208\n208\t\tmemcpy(hinfo->secret, secret, slen);\n(gdb) bt\n #0  seg6_genl_sethmac (skb=<optimized out>, info=<optimized out>) at net/ipv6/seg6.c:208\n #1  0xffffffff81e012e9 in genl_family_rcv_msg_doit (skb=skb@entry=0xffff88800b1f9f00, nlh=nlh@entry=0xffff88800b1b7600,\n    extack=extack@entry=0xffffc90000ba7af0, ops=ops@entry=0xffffc90000ba7a80, hdrlen=4, net=0xffffffff84237580 <init_net>, family=<optimized out>,\n    family=<optimized out>) at net/netlink/genetlink.c:731\n #2  0xffffffff81e01435 in genl_family_rcv_msg (extack=0xffffc90000ba7af0, nlh=0xffff88800b1b7600, skb=0xffff88800b1f9f00,\n    family=0xffffffff82fef6c0 <seg6_genl_family>) at net/netlink/genetlink.c:775\n #3  genl_rcv_msg (skb=0xffff88800b1f9f00, nlh=0xffff88800b1b7600, extack=0xffffc90000ba7af0) at net/netlink/genetlink.c:792\n #4  0xffffffff81dfffc3 in netlink_rcv_skb (skb=skb@entry=0xffff88800b1f9f00, cb=cb@entry=0xffffffff81e01350 <genl_rcv_msg>)\n    at net/netlink/af_netlink.c:2501\n #5  0xffffffff81e00919 in genl_rcv (skb=0xffff88800b1f9f00) at net/netlink/genetlink.c:803\n #6  0xffffffff81dff6ae in netlink_unicast_kernel (ssk=0xffff888010eec800, skb=0xffff88800b1f9f00, sk=0xffff888004aed000)\n    at net/netlink/af_netlink.c:1319\n #7  netlink_unicast (ssk=ssk@entry=0xffff888010eec800, skb=skb@entry=0xffff88800b1f9f00, portid=portid@entry=0, nonblock=<optimized out>)\n    at net/netlink/af_netlink.c:1345\n #8  0xffffffff81dff9a4 in netlink_sendmsg (sock=<optimized out>, msg=0xffffc90000ba7e48, len=<optimized out>) at net/netlink/af_netlink.c:1921\n...\n(gdb) p/x ((struct sk_buff *)0xffff88800b1f9f00)->head + ((struct sk_buff *)0xffff88800b1f9f00)->end\n$1 = 0xffff88800b1b76c0\n(gdb) p/x secret\n$2 = 0xffff88800b1b76c0\n(gdb) p slen\n$3 = 64 '@'\n\nThe OOB data can then be read back from userspace by dumping HMAC state. This\ncommit fixes this by ensuring SECRETLEN cannot exceed the actual length of\nSECRET.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48687",
               url: "https://www.suse.com/security/cve/CVE-2022-48687",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223952 for CVE-2022-48687",
               url: "https://bugzilla.suse.com/1223952",
            },
            {
               category: "external",
               summary: "SUSE Bug 1224043 for CVE-2022-48687",
               url: "https://bugzilla.suse.com/1224043",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-48687",
      },
      {
         cve: "CVE-2022-48688",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48688",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix kernel crash during module removal\n\nThe driver incorrectly frees client instance and subsequent\ni40e module removal leads to kernel crash.\n\nReproducer:\n1. Do ethtool offline test followed immediately by another one\nhost# ethtool -t eth0 offline; ethtool -t eth0 offline\n2. Remove recursively irdma module that also removes i40e module\nhost# modprobe -r irdma\n\nResult:\n[ 8675.035651] i40e 0000:3d:00.0 eno1: offline testing starting\n[ 8675.193774] i40e 0000:3d:00.0 eno1: testing finished\n[ 8675.201316] i40e 0000:3d:00.0 eno1: offline testing starting\n[ 8675.358921] i40e 0000:3d:00.0 eno1: testing finished\n[ 8675.496921] i40e 0000:3d:00.0: IRDMA hardware initialization FAILED init_state=2 status=-110\n[ 8686.188955] i40e 0000:3d:00.1: i40e_ptp_stop: removed PHC on eno2\n[ 8686.943890] i40e 0000:3d:00.1: Deleted LAN device PF1 bus=0x3d dev=0x00 func=0x01\n[ 8686.952669] i40e 0000:3d:00.0: i40e_ptp_stop: removed PHC on eno1\n[ 8687.761787] BUG: kernel NULL pointer dereference, address: 0000000000000030\n[ 8687.768755] #PF: supervisor read access in kernel mode\n[ 8687.773895] #PF: error_code(0x0000) - not-present page\n[ 8687.779034] PGD 0 P4D 0\n[ 8687.781575] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 8687.785935] CPU: 51 PID: 172891 Comm: rmmod Kdump: loaded Tainted: G        W I        5.19.0+ #2\n[ 8687.794800] Hardware name: Intel Corporation S2600WFD/S2600WFD, BIOS SE5C620.86B.0X.02.0001.051420190324 05/14/2019\n[ 8687.805222] RIP: 0010:i40e_lan_del_device+0x13/0xb0 [i40e]\n[ 8687.810719] Code: d4 84 c0 0f 84 b8 25 01 00 e9 9c 25 01 00 41 bc f4 ff ff ff eb 91 90 0f 1f 44 00 00 41 54 55 53 48 8b 87 58 08 00 00 48 89 fb <48> 8b 68 30 48 89 ef e8 21 8a 0f d5 48 89 ef e8 a9 78 0f d5 48 8b\n[ 8687.829462] RSP: 0018:ffffa604072efce0 EFLAGS: 00010202\n[ 8687.834689] RAX: 0000000000000000 RBX: ffff8f43833b2000 RCX: 0000000000000000\n[ 8687.841821] RDX: 0000000000000000 RSI: ffff8f4b0545b298 RDI: ffff8f43833b2000\n[ 8687.848955] RBP: ffff8f43833b2000 R08: 0000000000000001 R09: 0000000000000000\n[ 8687.856086] R10: 0000000000000000 R11: 000ffffffffff000 R12: ffff8f43833b2ef0\n[ 8687.863218] R13: ffff8f43833b2ef0 R14: ffff915103966000 R15: ffff8f43833b2008\n[ 8687.870342] FS:  00007f79501c3740(0000) GS:ffff8f4adffc0000(0000) knlGS:0000000000000000\n[ 8687.878427] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 8687.884174] CR2: 0000000000000030 CR3: 000000014276e004 CR4: 00000000007706e0\n[ 8687.891306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 8687.898441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 8687.905572] PKRU: 55555554\n[ 8687.908286] Call Trace:\n[ 8687.910737]  <TASK>\n[ 8687.912843]  i40e_remove+0x2c0/0x330 [i40e]\n[ 8687.917040]  pci_device_remove+0x33/0xa0\n[ 8687.920962]  device_release_driver_internal+0x1aa/0x230\n[ 8687.926188]  driver_detach+0x44/0x90\n[ 8687.929770]  bus_remove_driver+0x55/0xe0\n[ 8687.933693]  pci_unregister_driver+0x2a/0xb0\n[ 8687.937967]  i40e_exit_module+0xc/0xf48 [i40e]\n\nTwo offline tests cause IRDMA driver failure (ETIMEDOUT) and this\nfailure is indicated back to i40e_client_subtask() that calls\ni40e_client_del_instance() to free client instance referenced\nby pf->cinst and sets this pointer to NULL. During the module\nremoval i40e_remove() calls i40e_lan_del_device() that dereferences\npf->cinst that is NULL -> crash.\nDo not remove client instance when client open callbacks fails and\njust clear __I40E_CLIENT_INSTANCE_OPENED bit. The driver also needs\nto take care about this situation (when netdev is up and client\nis NOT opened) in i40e_notify_client_of_netdev_close() and\ncalls client close callback only when __I40E_CLIENT_INSTANCE_OPENED\nis set.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48688",
               url: "https://www.suse.com/security/cve/CVE-2022-48688",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223953 for CVE-2022-48688",
               url: "https://bugzilla.suse.com/1223953",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48688",
      },
      {
         cve: "CVE-2022-48695",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48695",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Fix use-after-free warning\n\nFix the following use-after-free warning which is observed during\ncontroller reset:\n\nrefcount_t: underflow; use-after-free.\nWARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48695",
               url: "https://www.suse.com/security/cve/CVE-2022-48695",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223941 for CVE-2022-48695",
               url: "https://bugzilla.suse.com/1223941",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-48695",
      },
      {
         cve: "CVE-2022-48701",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-48701",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()\n\nThere may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and\nthe number of it's interfaces less than 4, an out-of-bounds read bug occurs\nwhen parsing the interface descriptor for this device.\n\nFix this by checking the number of interfaces.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-48701",
               url: "https://www.suse.com/security/cve/CVE-2022-48701",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223921 for CVE-2022-48701",
               url: "https://bugzilla.suse.com/1223921",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2022-48701",
      },
      {
         cve: "CVE-2023-0160",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-0160",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A deadlock flaw was found in the Linux kernel's BPF subsystem. This flaw allows a local user to potentially crash the system.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-0160",
               url: "https://www.suse.com/security/cve/CVE-2023-0160",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209657 for CVE-2023-0160",
               url: "https://bugzilla.suse.com/1209657",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-0160",
      },
      {
         cve: "CVE-2023-52454",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52454",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length\n\nIf the host sends an H2CData command with an invalid DATAL,\nthe kernel may crash in nvmet_tcp_build_pdu_iovec().\n\nUnable to handle kernel NULL pointer dereference at\nvirtual address 0000000000000000\nlr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp]\nCall trace:\n  process_one_work+0x174/0x3c8\n  worker_thread+0x2d0/0x3e8\n  kthread+0x104/0x110\n\nFix the bug by raising a fatal error if DATAL isn't coherent\nwith the packet size.\nAlso, the PDU length should never exceed the MAXH2CDATA parameter which\nhas been communicated to the host in nvmet_tcp_handle_icreq().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52454",
               url: "https://www.suse.com/security/cve/CVE-2023-52454",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220320 for CVE-2023-52454",
               url: "https://bugzilla.suse.com/1220320",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52454",
      },
      {
         cve: "CVE-2023-52469",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52469",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/amd/pm: fix a use-after-free in kv_parse_power_table\n\nWhen ps allocated by kzalloc equals to NULL, kv_parse_power_table\nfrees adev->pm.dpm.ps that allocated before. However, after the control\nflow goes through the following call chains:\n\nkv_parse_power_table\n  |-> kv_dpm_init\n        |-> kv_dpm_sw_init\n\t      |-> kv_dpm_fini\n\nThe adev->pm.dpm.ps is used in the for loop of kv_dpm_fini after its\nfirst free in kv_parse_power_table and causes a use-after-free bug.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52469",
               url: "https://www.suse.com/security/cve/CVE-2023-52469",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220411 for CVE-2023-52469",
               url: "https://bugzilla.suse.com/1220411",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52469",
      },
      {
         cve: "CVE-2023-52470",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52470",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: check the alloc_workqueue return value in radeon_crtc_init()\n\ncheck the alloc_workqueue return value in radeon_crtc_init()\nto avoid null-ptr-deref.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52470",
               url: "https://www.suse.com/security/cve/CVE-2023-52470",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220413 for CVE-2023-52470",
               url: "https://bugzilla.suse.com/1220413",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52470",
      },
      {
         cve: "CVE-2023-52474",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52474",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests\n\nhfi1 user SDMA request processing has two bugs that can cause data\ncorruption for user SDMA requests that have multiple payload iovecs\nwhere an iovec other than the tail iovec does not run up to the page\nboundary for the buffer pointed to by that iovec.a\n\nHere are the specific bugs:\n1. user_sdma_txadd() does not use struct user_sdma_iovec->iov.iov_len.\n   Rather, user_sdma_txadd() will add up to PAGE_SIZE bytes from iovec\n   to the packet, even if some of those bytes are past\n   iovec->iov.iov_len and are thus not intended to be in the packet.\n2. user_sdma_txadd() and user_sdma_send_pkts() fail to advance to the\n   next iovec in user_sdma_request->iovs when the current iovec\n   is not PAGE_SIZE and does not contain enough data to complete the\n   packet. The transmitted packet will contain the wrong data from the\n   iovec pages.\n\nThis has not been an issue with SDMA packets from hfi1 Verbs or PSM2\nbecause they only produce iovecs that end short of PAGE_SIZE as the tail\niovec of an SDMA request.\n\nFixing these bugs exposes other bugs with the SDMA pin cache\n(struct mmu_rb_handler) that get in way of supporting user SDMA requests\nwith multiple payload iovecs whose buffers do not end at PAGE_SIZE. So\nthis commit fixes those issues as well.\n\nHere are the mmu_rb_handler bugs that non-PAGE_SIZE-end multi-iovec\npayload user SDMA requests can hit:\n1. Overlapping memory ranges in mmu_rb_handler will result in duplicate\n   pinnings.\n2. When extending an existing mmu_rb_handler entry (struct mmu_rb_node),\n   the mmu_rb code (1) removes the existing entry under a lock, (2)\n   releases that lock, pins the new pages, (3) then reacquires the lock\n   to insert the extended mmu_rb_node.\n\n   If someone else comes in and inserts an overlapping entry between (2)\n   and (3), insert in (3) will fail.\n\n   The failure path code in this case unpins _all_ pages in either the\n   original mmu_rb_node or the new mmu_rb_node that was inserted between\n   (2) and (3).\n3. In hfi1_mmu_rb_remove_unless_exact(), mmu_rb_node->refcount is\n   incremented outside of mmu_rb_handler->lock. As a result, mmu_rb_node\n   could be evicted by another thread that gets mmu_rb_handler->lock and\n   checks mmu_rb_node->refcount before mmu_rb_node->refcount is\n   incremented.\n4. Related to #2 above, SDMA request submission failure path does not\n   check mmu_rb_node->refcount before freeing mmu_rb_node object.\n\n   If there are other SDMA requests in progress whose iovecs have\n   pointers to the now-freed mmu_rb_node(s), those pointers to the\n   now-freed mmu_rb nodes will be dereferenced when those SDMA requests\n   complete.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52474",
               url: "https://www.suse.com/security/cve/CVE-2023-52474",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220445 for CVE-2023-52474",
               url: "https://bugzilla.suse.com/1220445",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2023-52474",
      },
      {
         cve: "CVE-2023-52476",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52476",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/x86/lbr: Filter vsyscall addresses\n\nWe found that a panic can occur when a vsyscall is made while LBR sampling\nis active. If the vsyscall is interrupted (NMI) for perf sampling, this\ncall sequence can occur (most recent at top):\n\n    __insn_get_emulate_prefix()\n    insn_get_emulate_prefix()\n    insn_get_prefixes()\n    insn_get_opcode()\n    decode_branch_type()\n    get_branch_type()\n    intel_pmu_lbr_filter()\n    intel_pmu_handle_irq()\n    perf_event_nmi_handler()\n\nWithin __insn_get_emulate_prefix() at frame 0, a macro is called:\n\n    peek_nbyte_next(insn_byte_t, insn, i)\n\nWithin this macro, this dereference occurs:\n\n    (insn)->next_byte\n\nInspecting registers at this point, the value of the next_byte field is the\naddress of the vsyscall made, for example the location of the vsyscall\nversion of gettimeofday() at 0xffffffffff600000. The access to an address\nin the vsyscall region will trigger an oops due to an unhandled page fault.\n\nTo fix the bug, filtering for vsyscalls can be done when\ndetermining the branch type. This patch will return\na \"none\" branch if a kernel address if found to lie in the\nvsyscall region.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52476",
               url: "https://www.suse.com/security/cve/CVE-2023-52476",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220703 for CVE-2023-52476",
               url: "https://bugzilla.suse.com/1220703",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52476",
      },
      {
         cve: "CVE-2023-52477",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52477",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: hub: Guard against accesses to uninitialized BOS descriptors\n\nMany functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h\naccess fields inside udev->bos without checking if it was allocated and\ninitialized. If usb_get_bos_descriptor() fails for whatever\nreason, udev->bos will be NULL and those accesses will result in a\ncrash:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000018\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1>\nHardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021\nWorkqueue: usb_hub_wq hub_event\nRIP: 0010:hub_port_reset+0x193/0x788\nCode: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9\nRSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310\nRDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840\nRBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060\nR10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000\nR13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000\nFS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0\nCall Trace:\nhub_event+0x73f/0x156e\n? hub_activate+0x5b7/0x68f\nprocess_one_work+0x1a2/0x487\nworker_thread+0x11a/0x288\nkthread+0x13a/0x152\n? process_one_work+0x487/0x487\n? kthread_associate_blkcg+0x70/0x70\nret_from_fork+0x1f/0x30\n\nFall back to a default behavior if the BOS descriptor isn't accessible\nand skip all the functionalities that depend on it: LPM support checks,\nSuper Speed capabilitiy checks, U1/U2 states setup.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52477",
               url: "https://www.suse.com/security/cve/CVE-2023-52477",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220790 for CVE-2023-52477",
               url: "https://bugzilla.suse.com/1220790",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52477",
      },
      {
         cve: "CVE-2023-52486",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52486",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: Don't unref the same fb many times by mistake due to deadlock handling\n\nIf we get a deadlock after the fb lookup in drm_mode_page_flip_ioctl()\nwe proceed to unref the fb and then retry the whole thing from the top.\nBut we forget to reset the fb pointer back to NULL, and so if we then\nget another error during the retry, before the fb lookup, we proceed\nthe unref the same fb again without having gotten another reference.\nThe end result is that the fb will (eventually) end up being freed\nwhile it's still in use.\n\nReset fb to NULL once we've unreffed it to avoid doing it again\nuntil we've done another fb lookup.\n\nThis turned out to be pretty easy to hit on a DG2 when doing async\nflips (and CONFIG_DEBUG_WW_MUTEX_SLOWPATH=y). The first symptom I\nsaw that drm_closefb() simply got stuck in a busy loop while walking\nthe framebuffer list. Fortunately I was able to convince it to oops\ninstead, and from there it was easier to track down the culprit.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52486",
               url: "https://www.suse.com/security/cve/CVE-2023-52486",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221277 for CVE-2023-52486",
               url: "https://bugzilla.suse.com/1221277",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52486",
      },
      {
         cve: "CVE-2023-52488",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52488",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO\n\nThe SC16IS7XX IC supports a burst mode to access the FIFOs where the\ninitial register address is sent ($00), followed by all the FIFO data\nwithout having to resend the register address each time. In this mode, the\nIC doesn't increment the register address for each R/W byte.\n\nThe regmap_raw_read() and regmap_raw_write() are functions which can\nperform IO over multiple registers. They are currently used to read/write\nfrom/to the FIFO, and although they operate correctly in this burst mode on\nthe SPI bus, they would corrupt the regmap cache if it was not disabled\nmanually. The reason is that when the R/W size is more than 1 byte, these\nfunctions assume that the register address is incremented and handle the\ncache accordingly.\n\nConvert FIFO R/W functions to use the regmap _noinc_ versions in order to\nremove the manual cache control which was a workaround when using the\n_raw_ versions. FIFO registers are properly declared as volatile so\ncache will not be used/updated for FIFO accesses.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52488",
               url: "https://www.suse.com/security/cve/CVE-2023-52488",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221162 for CVE-2023-52488",
               url: "https://bugzilla.suse.com/1221162",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52488",
      },
      {
         cve: "CVE-2023-52509",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52509",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nravb: Fix use-after-free issue in ravb_tx_timeout_work()\n\nThe ravb_stop() should call cancel_work_sync(). Otherwise,\nravb_tx_timeout_work() is possible to use the freed priv after\nravb_remove() was called like below:\n\nCPU0\t\t\tCPU1\n\t\t\travb_tx_timeout()\nravb_remove()\nunregister_netdev()\nfree_netdev(ndev)\n// free priv\n\t\t\travb_tx_timeout_work()\n\t\t\t// use priv\n\nunregister_netdev() will call .ndo_stop() so that ravb_stop() is\ncalled. And, after phy_stop() is called, netif_carrier_off()\nis also called. So that .ndo_tx_timeout() will not be called\nafter phy_stop().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52509",
               url: "https://www.suse.com/security/cve/CVE-2023-52509",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220836 for CVE-2023-52509",
               url: "https://bugzilla.suse.com/1220836",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223290 for CVE-2023-52509",
               url: "https://bugzilla.suse.com/1223290",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52509",
      },
      {
         cve: "CVE-2023-52515",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52515",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srp: Do not call scsi_done() from srp_abort()\n\nAfter scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler\ncallback, it performs one of the following actions:\n* Call scsi_queue_insert().\n* Call scsi_finish_command().\n* Call scsi_eh_scmd_add().\nHence, SCSI abort handlers must not call scsi_done(). Otherwise all\nthe above actions would trigger a use-after-free. Hence remove the\nscsi_done() call from srp_abort(). Keep the srp_free_req() call\nbefore returning SUCCESS because we may not see the command again if\nSUCCESS is returned.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52515",
               url: "https://www.suse.com/security/cve/CVE-2023-52515",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221048 for CVE-2023-52515",
               url: "https://bugzilla.suse.com/1221048",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52515",
      },
      {
         cve: "CVE-2023-52524",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52524",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: nfc: llcp: Add lock when modifying device list\n\nThe device list needs its associated lock held when modifying it, or the\nlist could become corrupted, as syzbot discovered.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52524",
               url: "https://www.suse.com/security/cve/CVE-2023-52524",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220927 for CVE-2023-52524",
               url: "https://bugzilla.suse.com/1220927",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52524",
      },
      {
         cve: "CVE-2023-52528",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52528",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg\n\nsyzbot reported the following uninit-value access issue:\n\n=====================================================\nBUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline]\nBUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482\nCPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x21c/0x280 lib/dump_stack.c:118\n kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121\n __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215\n smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline]\n smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482\n usbnet_probe+0x1152/0x3f90 drivers/net/usb/usbnet.c:1737\n usb_probe_interface+0xece/0x1550 drivers/usb/core/driver.c:374\n really_probe+0xf20/0x20b0 drivers/base/dd.c:529\n driver_probe_device+0x293/0x390 drivers/base/dd.c:701\n __device_attach_driver+0x63f/0x830 drivers/base/dd.c:807\n bus_for_each_drv+0x2ca/0x3f0 drivers/base/bus.c:431\n __device_attach+0x4e2/0x7f0 drivers/base/dd.c:873\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:920\n bus_probe_device+0x177/0x3d0 drivers/base/bus.c:491\n device_add+0x3b0e/0x40d0 drivers/base/core.c:2680\n usb_set_configuration+0x380f/0x3f10 drivers/usb/core/message.c:2032\n usb_generic_driver_probe+0x138/0x300 drivers/usb/core/generic.c:241\n usb_probe_device+0x311/0x490 drivers/usb/core/driver.c:272\n really_probe+0xf20/0x20b0 drivers/base/dd.c:529\n driver_probe_device+0x293/0x390 drivers/base/dd.c:701\n __device_attach_driver+0x63f/0x830 drivers/base/dd.c:807\n bus_for_each_drv+0x2ca/0x3f0 drivers/base/bus.c:431\n __device_attach+0x4e2/0x7f0 drivers/base/dd.c:873\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:920\n bus_probe_device+0x177/0x3d0 drivers/base/bus.c:491\n device_add+0x3b0e/0x40d0 drivers/base/core.c:2680\n usb_new_device+0x1bd4/0x2a30 drivers/usb/core/hub.c:2554\n hub_port_connect drivers/usb/core/hub.c:5208 [inline]\n hub_port_connect_change drivers/usb/core/hub.c:5348 [inline]\n port_event drivers/usb/core/hub.c:5494 [inline]\n hub_event+0x5e7b/0x8a70 drivers/usb/core/hub.c:5576\n process_one_work+0x1688/0x2140 kernel/workqueue.c:2269\n worker_thread+0x10bc/0x2730 kernel/workqueue.c:2415\n kthread+0x551/0x590 kernel/kthread.c:292\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293\n\nLocal variable ----buf.i87@smsc75xx_bind created at:\n __smsc75xx_read_reg drivers/net/usb/smsc75xx.c:83 [inline]\n smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:968 [inline]\n smsc75xx_bind+0x485/0x11e0 drivers/net/usb/smsc75xx.c:1482\n __smsc75xx_read_reg drivers/net/usb/smsc75xx.c:83 [inline]\n smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:968 [inline]\n smsc75xx_bind+0x485/0x11e0 drivers/net/usb/smsc75xx.c:1482\n\nThis issue is caused because usbnet_read_cmd() reads less bytes than requested\n(zero byte in the reproducer). In this case, 'buf' is not properly filled.\n\nThis patch fixes the issue by returning -ENODATA if usbnet_read_cmd() reads\nless bytes than requested.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52528",
               url: "https://www.suse.com/security/cve/CVE-2023-52528",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220843 for CVE-2023-52528",
               url: "https://bugzilla.suse.com/1220843",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.5,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2023-52528",
      },
      {
         cve: "CVE-2023-52575",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52575",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52575",
               url: "https://www.suse.com/security/cve/CVE-2023-52575",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220871 for CVE-2023-52575",
               url: "https://bugzilla.suse.com/1220871",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52575",
      },
      {
         cve: "CVE-2023-52583",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52583",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix deadlock or deadcode of misusing dget()\n\nThe lock order is incorrect between denty and its parent, we should\nalways make sure that the parent get the lock first.\n\nBut since this deadcode is never used and the parent dir will always\nbe set from the callers, let's just remove it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52583",
               url: "https://www.suse.com/security/cve/CVE-2023-52583",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221058 for CVE-2023-52583",
               url: "https://bugzilla.suse.com/1221058",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52583",
      },
      {
         cve: "CVE-2023-52587",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52587",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/ipoib: Fix mcast list locking\n\nReleasing the `priv->lock` while iterating the `priv->multicast_list` in\n`ipoib_mcast_join_task()` opens a window for `ipoib_mcast_dev_flush()` to\nremove the items while in the middle of iteration. If the mcast is removed\nwhile the lock was dropped, the for loop spins forever resulting in a hard\nlockup (as was reported on RHEL 4.18.0-372.75.1.el8_6 kernel):\n\n    Task A (kworker/u72:2 below)       | Task B (kworker/u72:0 below)\n    -----------------------------------+-----------------------------------\n    ipoib_mcast_join_task(work)        | ipoib_ib_dev_flush_light(work)\n      spin_lock_irq(&priv->lock)       | __ipoib_ib_dev_flush(priv, ...)\n      list_for_each_entry(mcast,       | ipoib_mcast_dev_flush(dev = priv->dev)\n          &priv->multicast_list, list) |\n        ipoib_mcast_join(dev, mcast)   |\n          spin_unlock_irq(&priv->lock) |\n                                       |   spin_lock_irqsave(&priv->lock, flags)\n                                       |   list_for_each_entry_safe(mcast, tmcast,\n                                       |                  &priv->multicast_list, list)\n                                       |     list_del(&mcast->list);\n                                       |     list_add_tail(&mcast->list, &remove_list)\n                                       |   spin_unlock_irqrestore(&priv->lock, flags)\n          spin_lock_irq(&priv->lock)   |\n                                       |   ipoib_mcast_remove_list(&remove_list)\n   (Here, `mcast` is no longer on the  |     list_for_each_entry_safe(mcast, tmcast,\n    `priv->multicast_list` and we keep |                            remove_list, list)\n    spinning on the `remove_list` of   |  >>>  wait_for_completion(&mcast->done)\n    the other thread which is blocked  |\n    and the list is still valid on     |\n    it's stack.)\n\nFix this by keeping the lock held and changing to GFP_ATOMIC to prevent\neventual sleeps.\nUnfortunately we could not reproduce the lockup and confirm this fix but\nbased on the code review I think this fix should address such lockups.\n\ncrash> bc 31\nPID: 747      TASK: ff1c6a1a007e8000  CPU: 31   COMMAND: \"kworker/u72:2\"\n--\n    [exception RIP: ipoib_mcast_join_task+0x1b1]\n    RIP: ffffffffc0944ac1  RSP: ff646f199a8c7e00  RFLAGS: 00000002\n    RAX: 0000000000000000  RBX: ff1c6a1a04dc82f8  RCX: 0000000000000000\n                                  work (&priv->mcast_task{,.work})\n    RDX: ff1c6a192d60ac68  RSI: 0000000000000286  RDI: ff1c6a1a04dc8000\n           &mcast->list\n    RBP: ff646f199a8c7e90   R8: ff1c699980019420   R9: ff1c6a1920c9a000\n    R10: ff646f199a8c7e00  R11: ff1c6a191a7d9800  R12: ff1c6a192d60ac00\n                                                         mcast\n    R13: ff1c6a1d82200000  R14: ff1c6a1a04dc8000  R15: ff1c6a1a04dc82d8\n           dev                    priv (&priv->lock)     &priv->multicast_list (aka head)\n    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018\n--- <NMI exception stack> ---\n #5 [ff646f199a8c7e00] ipoib_mcast_join_task+0x1b1 at ffffffffc0944ac1 [ib_ipoib]\n #6 [ff646f199a8c7e98] process_one_work+0x1a7 at ffffffff9bf10967\n\ncrash> rx ff646f199a8c7e68\nff646f199a8c7e68:  ff1c6a1a04dc82f8 <<< work = &priv->mcast_task.work\n\ncrash> list -hO ipoib_dev_priv.multicast_list ff1c6a1a04dc8000\n(empty)\n\ncrash> ipoib_dev_priv.mcast_task.work.func,mcast_mutex.owner.counter ff1c6a1a04dc8000\n  mcast_task.work.func = 0xffffffffc0944910 <ipoib_mcast_join_task>,\n  mcast_mutex.owner.counter = 0xff1c69998efec000\n\ncrash> b 8\nPID: 8        TASK: ff1c69998efec000  CPU: 33   COMMAND: \"kworker/u72:0\"\n--\n #3 [ff646f1980153d50] wait_for_completion+0x96 at ffffffff9c7d7646\n #4 [ff646f1980153d90] ipoib_mcast_remove_list+0x56 at ffffffffc0944dc6 [ib_ipoib]\n #5 [ff646f1980153de8] ipoib_mcast_dev_flush+0x1a7 at ffffffffc09455a7 [ib_ipoib]\n #6 [ff646f1980153e58] __ipoib_ib_dev_flush+0x1a4 at ffffffffc09431a4 [ib_ipoib]\n #7 [ff\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52587",
               url: "https://www.suse.com/security/cve/CVE-2023-52587",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221082 for CVE-2023-52587",
               url: "https://bugzilla.suse.com/1221082",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52587",
      },
      {
         cve: "CVE-2023-52590",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52590",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change ocfs2 rename code to avoid touching renamed directory if\nits parent does not change as without locking that can corrupt the\nfilesystem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52590",
               url: "https://www.suse.com/security/cve/CVE-2023-52590",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221088 for CVE-2023-52590",
               url: "https://bugzilla.suse.com/1221088",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52590",
      },
      {
         cve: "CVE-2023-52591",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52591",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nreiserfs: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change reiserfs rename code to avoid touching renamed directory\nif its parent does not change as without locking that can corrupt the\nfilesystem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52591",
               url: "https://www.suse.com/security/cve/CVE-2023-52591",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221044 for CVE-2023-52591",
               url: "https://bugzilla.suse.com/1221044",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221578 for CVE-2023-52591",
               url: "https://bugzilla.suse.com/1221578",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221598 for CVE-2023-52591",
               url: "https://bugzilla.suse.com/1221598",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2023-52591",
      },
      {
         cve: "CVE-2023-52595",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52595",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00: restart beacon queue when hardware reset\n\nWhen a hardware reset is triggered, all registers are reset, so all\nqueues are forced to stop in hardware interface. However, mac80211\nwill not automatically stop the queue. If we don't manually stop the\nbeacon queue, the queue will be deadlocked and unable to start again.\nThis patch fixes the issue where Apple devices cannot connect to the\nAP after calling ieee80211_restart_hw().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52595",
               url: "https://www.suse.com/security/cve/CVE-2023-52595",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221046 for CVE-2023-52595",
               url: "https://bugzilla.suse.com/1221046",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52595",
      },
      {
         cve: "CVE-2023-52598",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52598",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ptrace: handle setting of fpc register correctly\n\nIf the content of the floating point control (fpc) register of a traced\nprocess is modified with the ptrace interface the new value is tested for\nvalidity by temporarily loading it into the fpc register.\n\nThis may lead to corruption of the fpc register of the tracing process:\nif an interrupt happens while the value is temporarily loaded into the\nfpc register, and within interrupt context floating point or vector\nregisters are used, the current fp/vx registers are saved with\nsave_fpu_regs() assuming they belong to user space and will be loaded into\nfp/vx registers when returning to user space.\n\ntest_fp_ctl() restores the original user space fpc register value, however\nit will be discarded, when returning to user space.\n\nIn result the tracer will incorrectly continue to run with the value that\nwas supposed to be used for the traced process.\n\nFix this by saving fpu register contents with save_fpu_regs() before using\ntest_fp_ctl().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52598",
               url: "https://www.suse.com/security/cve/CVE-2023-52598",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221060 for CVE-2023-52598",
               url: "https://bugzilla.suse.com/1221060",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52598",
      },
      {
         cve: "CVE-2023-52607",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52607",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm: Fix null-pointer dereference in pgtable_cache_add\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure. Ensure the allocation was successful\nby checking the pointer validity.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52607",
               url: "https://www.suse.com/security/cve/CVE-2023-52607",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221061 for CVE-2023-52607",
               url: "https://bugzilla.suse.com/1221061",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52607",
      },
      {
         cve: "CVE-2023-52614",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52614",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Fix buffer overflow in trans_stat_show\n\nFix buffer overflow in trans_stat_show().\n\nConvert simple snprintf to the more secure scnprintf with size of\nPAGE_SIZE.\n\nAdd condition checking if we are exceeding PAGE_SIZE and exit early from\nloop. Also add at the end a warning that we exceeded PAGE_SIZE and that\nstats is disabled.\n\nReturn -EFBIG in the case where we don't have enough space to write the\nfull transition table.\n\nAlso document in the ABI that this function can return -EFBIG error.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52614",
               url: "https://www.suse.com/security/cve/CVE-2023-52614",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221617 for CVE-2023-52614",
               url: "https://bugzilla.suse.com/1221617",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52614",
      },
      {
         cve: "CVE-2023-52620",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52620",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: disallow timeout for anonymous sets\n\nNever used from userspace, disallow these parameters.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52620",
               url: "https://www.suse.com/security/cve/CVE-2023-52620",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221825 for CVE-2023-52620",
               url: "https://bugzilla.suse.com/1221825",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52620",
      },
      {
         cve: "CVE-2023-52628",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52628",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nftables: exthdr: fix 4-byte stack OOB write\n\nIf priv->len is a multiple of 4, then dst[len / 4] can write past\nthe destination array which leads to stack corruption.\n\nThis construct is necessary to clean the remainder of the register\nin case ->len is NOT a multiple of the register size, so make it\nconditional just like nft_payload.c does.\n\nThe bug was added in 4.1 cycle and then copied/inherited when\ntcp/sctp and ip option support was added.\n\nBug reported by Zero Day Initiative project (ZDI-CAN-21950,\nZDI-CAN-21951, ZDI-CAN-21961).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52628",
               url: "https://www.suse.com/security/cve/CVE-2023-52628",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222117 for CVE-2023-52628",
               url: "https://bugzilla.suse.com/1222117",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222118 for CVE-2023-52628",
               url: "https://bugzilla.suse.com/1222118",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2023-52628",
      },
      {
         cve: "CVE-2023-52635",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52635",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Synchronize devfreq_monitor_[start/stop]\n\nThere is a chance if a frequent switch of the governor\ndone in a loop result in timer list corruption where\ntimer cancel being done from two place one from\ncancel_delayed_work_sync() and followed by expire_timers()\ncan be seen from the traces[1].\n\nwhile true\ndo\n        echo \"simple_ondemand\" > /sys/class/devfreq/1d84000.ufshc/governor\n        echo \"performance\" > /sys/class/devfreq/1d84000.ufshc/governor\ndone\n\nIt looks to be issue with devfreq driver where\ndevice_monitor_[start/stop] need to synchronized so that\ndelayed work should get corrupted while it is either\nbeing queued or running or being cancelled.\n\nLet's use polling flag and devfreq lock to synchronize the\nqueueing the timer instance twice and work data being\ncorrupted.\n\n[1]\n...\n..\n<idle>-0    [003]   9436.209662:  timer_cancel   timer=0xffffff80444f0428\n<idle>-0    [003]   9436.209664:  timer_expire_entry   timer=0xffffff80444f0428  now=0x10022da1c  function=__typeid__ZTSFvP10timer_listE_global_addr  baseclk=0x10022da1c\n<idle>-0    [003]   9436.209718:  timer_expire_exit   timer=0xffffff80444f0428\nkworker/u16:6-14217    [003]   9436.209863:  timer_start   timer=0xffffff80444f0428  function=__typeid__ZTSFvP10timer_listE_global_addr  expires=0x10022da2b  now=0x10022da1c  flags=182452227\nvendor.xxxyyy.ha-1593    [004]   9436.209888:  timer_cancel   timer=0xffffff80444f0428\nvendor.xxxyyy.ha-1593    [004]   9436.216390:  timer_init   timer=0xffffff80444f0428\nvendor.xxxyyy.ha-1593    [004]   9436.216392:  timer_start   timer=0xffffff80444f0428  function=__typeid__ZTSFvP10timer_listE_global_addr  expires=0x10022da2c  now=0x10022da1d  flags=186646532\nvendor.xxxyyy.ha-1593    [005]   9436.220992:  timer_cancel   timer=0xffffff80444f0428\nxxxyyyTraceManag-7795    [004]   9436.261641:  timer_cancel   timer=0xffffff80444f0428\n\n[2]\n\n 9436.261653][    C4] Unable to handle kernel paging request at virtual address dead00000000012a\n[ 9436.261664][    C4] Mem abort info:\n[ 9436.261666][    C4]   ESR = 0x96000044\n[ 9436.261669][    C4]   EC = 0x25: DABT (current EL), IL = 32 bits\n[ 9436.261671][    C4]   SET = 0, FnV = 0\n[ 9436.261673][    C4]   EA = 0, S1PTW = 0\n[ 9436.261675][    C4] Data abort info:\n[ 9436.261677][    C4]   ISV = 0, ISS = 0x00000044\n[ 9436.261680][    C4]   CM = 0, WnR = 1\n[ 9436.261682][    C4] [dead00000000012a] address between user and kernel address ranges\n[ 9436.261685][    C4] Internal error: Oops: 96000044 [#1] PREEMPT SMP\n[ 9436.261701][    C4] Skip md ftrace buffer dump for: 0x3a982d0\n...\n\n[ 9436.262138][    C4] CPU: 4 PID: 7795 Comm: TraceManag Tainted: G S      W  O      5.10.149-android12-9-o-g17f915d29d0c #1\n[ 9436.262141][    C4] Hardware name: Qualcomm Technologies, Inc.  (DT)\n[ 9436.262144][    C4] pstate: 22400085 (nzCv daIf +PAN -UAO +TCO BTYPE=--)\n[ 9436.262161][    C4] pc : expire_timers+0x9c/0x438\n[ 9436.262164][    C4] lr : expire_timers+0x2a4/0x438\n[ 9436.262168][    C4] sp : ffffffc010023dd0\n[ 9436.262171][    C4] x29: ffffffc010023df0 x28: ffffffd0636fdc18\n[ 9436.262178][    C4] x27: ffffffd063569dd0 x26: ffffffd063536008\n[ 9436.262182][    C4] x25: 0000000000000001 x24: ffffff88f7c69280\n[ 9436.262185][    C4] x23: 00000000000000e0 x22: dead000000000122\n[ 9436.262188][    C4] x21: 000000010022da29 x20: ffffff8af72b4e80\n[ 9436.262191][    C4] x19: ffffffc010023e50 x18: ffffffc010025038\n[ 9436.262195][    C4] x17: 0000000000000240 x16: 0000000000000201\n[ 9436.262199][    C4] x15: ffffffffffffffff x14: ffffff889f3c3100\n[ 9436.262203][    C4] x13: ffffff889f3c3100 x12: 00000000049f56b8\n[ 9436.262207][    C4] x11: 00000000049f56b8 x10: 00000000ffffffff\n[ 9436.262212][    C4] x9 : ffffffc010023e50 x8 : dead000000000122\n[ 9436.262216][    C4] x7 : ffffffffffffffff x6 : ffffffc0100239d8\n[ 9436.262220][    C4] x5 : 0000000000000000 x4 : 0000000000000101\n[ 9436.262223][    C4] x3 : 0000000000000080 x2 : ffffff8\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52635",
               url: "https://www.suse.com/security/cve/CVE-2023-52635",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222294 for CVE-2023-52635",
               url: "https://bugzilla.suse.com/1222294",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52635",
      },
      {
         cve: "CVE-2023-52639",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52639",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: vsie: fix race during shadow creation\n\nRight now it is possible to see gmap->private being zero in\nkvm_s390_vsie_gmap_notifier resulting in a crash.  This is due to the\nfact that we add gmap->private == kvm after creation:\n\nstatic int acquire_gmap_shadow(struct kvm_vcpu *vcpu,\n                               struct vsie_page *vsie_page)\n{\n[...]\n        gmap = gmap_shadow(vcpu->arch.gmap, asce, edat);\n        if (IS_ERR(gmap))\n                return PTR_ERR(gmap);\n        gmap->private = vcpu->kvm;\n\nLet children inherit the private field of the parent.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52639",
               url: "https://www.suse.com/security/cve/CVE-2023-52639",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222300 for CVE-2023-52639",
               url: "https://bugzilla.suse.com/1222300",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52639",
      },
      {
         cve: "CVE-2023-52644",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52644",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled\n\nWhen QoS is disabled, the queue priority value will not map to the correct\nieee80211 queue since there is only one queue. Stop/wake queue 0 when QoS\nis disabled to prevent trying to stop/wake a non-existent queue and failing\nto stop/wake the actual queue instantiated.\n\nLog of issue before change (with kernel parameter qos=0):\n    [  +5.112651] ------------[ cut here ]------------\n    [  +0.000005] WARNING: CPU: 7 PID: 25513 at net/mac80211/util.c:449 __ieee80211_wake_queue+0xd5/0x180 [mac80211]\n    [  +0.000067] Modules linked in: b43(O) snd_seq_dummy snd_hrtimer snd_seq snd_seq_device nft_chain_nat xt_MASQUERADE nf_nat xfrm_user xfrm_algo xt_addrtype overlay ccm af_packet amdgpu snd_hda_codec_cirrus snd_hda_codec_generic ledtrig_audio drm_exec amdxcp gpu_sched xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_rpfilter ipt_rpfilter xt_pkttype xt_LOG nf_log_syslog xt_tcpudp nft_compat nf_tables nfnetlink sch_fq_codel btusb uinput iTCO_wdt ctr btrtl intel_pmc_bxt i915 intel_rapl_msr mei_hdcp mei_pxp joydev at24 watchdog btintel atkbd libps2 serio radeon btbcm vivaldi_fmap btmtk intel_rapl_common snd_hda_codec_hdmi bluetooth uvcvideo nls_iso8859_1 applesmc nls_cp437 x86_pkg_temp_thermal snd_hda_intel intel_powerclamp vfat videobuf2_vmalloc coretemp fat snd_intel_dspcfg crc32_pclmul uvc polyval_clmulni snd_intel_sdw_acpi loop videobuf2_memops snd_hda_codec tun drm_suballoc_helper polyval_generic drm_ttm_helper drm_buddy tap ecdh_generic videobuf2_v4l2 gf128mul macvlan ttm ghash_clmulni_intel ecc tg3\n    [  +0.000044]  videodev bridge snd_hda_core rapl crc16 drm_display_helper cec mousedev snd_hwdep evdev intel_cstate bcm5974 hid_appleir videobuf2_common stp mac_hid libphy snd_pcm drm_kms_helper acpi_als mei_me intel_uncore llc mc snd_timer intel_gtt industrialio_triggered_buffer apple_mfi_fastcharge i2c_i801 mei snd lpc_ich agpgart ptp i2c_smbus thunderbolt apple_gmux i2c_algo_bit kfifo_buf video industrialio soundcore pps_core wmi tiny_power_button sbs sbshc button ac cordic bcma mac80211 cfg80211 ssb rfkill libarc4 kvm_intel kvm drm irqbypass fuse backlight firmware_class efi_pstore configfs efivarfs dmi_sysfs ip_tables x_tables autofs4 dm_crypt cbc encrypted_keys trusted asn1_encoder tee tpm rng_core input_leds hid_apple led_class hid_generic usbhid hid sd_mod t10_pi crc64_rocksoft crc64 crc_t10dif crct10dif_generic ahci libahci libata uhci_hcd ehci_pci ehci_hcd crct10dif_pclmul crct10dif_common sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 aesni_intel usbcore scsi_mod libaes crypto_simd cryptd scsi_common\n    [  +0.000055]  usb_common rtc_cmos btrfs blake2b_generic libcrc32c crc32c_generic crc32c_intel xor raid6_pq dm_snapshot dm_bufio dm_mod dax [last unloaded: b43(O)]\n    [  +0.000009] CPU: 7 PID: 25513 Comm: irq/17-b43 Tainted: G        W  O       6.6.7 #1-NixOS\n    [  +0.000003] Hardware name: Apple Inc. MacBookPro8,3/Mac-942459F5819B171B, BIOS 87.0.0.0.0 06/13/2019\n    [  +0.000001] RIP: 0010:__ieee80211_wake_queue+0xd5/0x180 [mac80211]\n    [  +0.000046] Code: 00 45 85 e4 0f 85 9b 00 00 00 48 8d bd 40 09 00 00 f0 48 0f ba ad 48 09 00 00 00 72 0f 5b 5d 41 5c 41 5d 41 5e e9 cb 6d 3c d0 <0f> 0b 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 48 8d b4 16 94 00 00\n    [  +0.000002] RSP: 0018:ffffc90003c77d60 EFLAGS: 00010097\n    [  +0.000001] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000000000000\n    [  +0.000001] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88820b924900\n    [  +0.000002] RBP: ffff88820b924900 R08: ffffc90003c77d90 R09: 000000000003bfd0\n    [  +0.000001] R10: ffff88820b924900 R11: ffffc90003c77c68 R12: 0000000000000000\n    [  +0.000001] R13: 0000000000000000 R14: ffffc90003c77d90 R15: ffffffffc0fa6f40\n    [  +0.000001] FS:  0000000000000000(0000) GS:ffff88846fb80000(0000) knlGS:0000000000000000\n    [  +0.000001] CS:  0010 DS: 0\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52644",
               url: "https://www.suse.com/security/cve/CVE-2023-52644",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222961 for CVE-2023-52644",
               url: "https://bugzilla.suse.com/1222961",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52644",
      },
      {
         cve: "CVE-2023-52646",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52646",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\naio: fix mremap after fork null-deref\n\nCommit e4a0d3e720e7 (\"aio: Make it possible to remap aio ring\") introduced\na null-deref if mremap is called on an old aio mapping after fork as\nmm->ioctx_table will be set to NULL.\n\n[jmoyer@redhat.com: fix 80 column issue]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52646",
               url: "https://www.suse.com/security/cve/CVE-2023-52646",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223432 for CVE-2023-52646",
               url: "https://bugzilla.suse.com/1223432",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52646",
      },
      {
         cve: "CVE-2023-52650",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52650",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/tegra: dsi: Add missing check for of_find_device_by_node\n\nAdd check for the return value of of_find_device_by_node() and return\nthe error if it fails in order to avoid NULL pointer dereference.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52650",
               url: "https://www.suse.com/security/cve/CVE-2023-52650",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223770 for CVE-2023-52650",
               url: "https://bugzilla.suse.com/1223770",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52650",
      },
      {
         cve: "CVE-2023-52652",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52652",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNTB: fix possible name leak in ntb_register_device()\n\nIf device_register() fails in ntb_register_device(), the device name\nallocated by dev_set_name() should be freed. As per the comment in\ndevice_register(), callers should use put_device() to give up the\nreference in the error path. So fix this by calling put_device() in the\nerror path so that the name can be freed in kobject_cleanup().\n\nAs a result of this, put_device() in the error path of\nntb_register_device() is removed and the actual error is returned.\n\n[mani: reworded commit message]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52652",
               url: "https://www.suse.com/security/cve/CVE-2023-52652",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223686 for CVE-2023-52652",
               url: "https://bugzilla.suse.com/1223686",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2023-52652",
      },
      {
         cve: "CVE-2023-52653",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52653",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: fix a memleak in gss_import_v2_context\n\nThe ctx->mech_used.data allocated by kmemdup is not freed in neither\ngss_import_v2_context nor it only caller gss_krb5_import_sec_context,\nwhich frees ctx on error.\n\nThus, this patch reform the last call of gss_import_v2_context to the\ngss_krb5_import_ctx_v2, preventing the memleak while keepping the return\nformation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52653",
               url: "https://www.suse.com/security/cve/CVE-2023-52653",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223712 for CVE-2023-52653",
               url: "https://bugzilla.suse.com/1223712",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2023-52653",
      },
      {
         cve: "CVE-2023-6270",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-6270",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-6270",
               url: "https://www.suse.com/security/cve/CVE-2023-6270",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218562 for CVE-2023-6270",
               url: "https://bugzilla.suse.com/1218562",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218813 for CVE-2023-6270",
               url: "https://bugzilla.suse.com/1218813",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221578 for CVE-2023-6270",
               url: "https://bugzilla.suse.com/1221578",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221598 for CVE-2023-6270",
               url: "https://bugzilla.suse.com/1221598",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223016 for CVE-2023-6270",
               url: "https://bugzilla.suse.com/1223016",
            },
            {
               category: "external",
               summary: "SUSE Bug 1227675 for CVE-2023-6270",
               url: "https://bugzilla.suse.com/1227675",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-6270",
      },
      {
         cve: "CVE-2023-6356",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-6356",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-6356",
               url: "https://www.suse.com/security/cve/CVE-2023-6356",
            },
            {
               category: "external",
               summary: "SUSE Bug 1217987 for CVE-2023-6356",
               url: "https://bugzilla.suse.com/1217987",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-6356",
      },
      {
         cve: "CVE-2023-6535",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-6535",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-6535",
               url: "https://www.suse.com/security/cve/CVE-2023-6535",
            },
            {
               category: "external",
               summary: "SUSE Bug 1217988 for CVE-2023-6535",
               url: "https://bugzilla.suse.com/1217988",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-6535",
      },
      {
         cve: "CVE-2023-6536",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-6536",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-6536",
               url: "https://www.suse.com/security/cve/CVE-2023-6536",
            },
            {
               category: "external",
               summary: "SUSE Bug 1217989 for CVE-2023-6536",
               url: "https://bugzilla.suse.com/1217989",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-6536",
      },
      {
         cve: "CVE-2023-7042",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-7042",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-7042",
               url: "https://www.suse.com/security/cve/CVE-2023-7042",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218336 for CVE-2023-7042",
               url: "https://bugzilla.suse.com/1218336",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-7042",
      },
      {
         cve: "CVE-2023-7192",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-7192",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-7192",
               url: "https://www.suse.com/security/cve/CVE-2023-7192",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218479 for CVE-2023-7192",
               url: "https://bugzilla.suse.com/1218479",
            },
            {
               category: "external",
               summary: "SUSE Bug 1227675 for CVE-2023-7192",
               url: "https://bugzilla.suse.com/1227675",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-7192",
      },
      {
         cve: "CVE-2024-2201",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-2201",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-2201",
               url: "https://www.suse.com/security/cve/CVE-2024-2201",
            },
            {
               category: "external",
               summary: "SUSE Bug 1212111 for CVE-2024-2201",
               url: "https://bugzilla.suse.com/1212111",
            },
            {
               category: "external",
               summary: "SUSE Bug 1217339 for CVE-2024-2201",
               url: "https://bugzilla.suse.com/1217339",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-2201",
      },
      {
         cve: "CVE-2024-22099",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-22099",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.\n\nThis issue affects Linux kernel: v2.6.12-rc2.\n\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-22099",
               url: "https://www.suse.com/security/cve/CVE-2024-22099",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219170 for CVE-2024-22099",
               url: "https://bugzilla.suse.com/1219170",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-22099",
      },
      {
         cve: "CVE-2024-23307",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-23307",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-23307",
               url: "https://www.suse.com/security/cve/CVE-2024-23307",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219169 for CVE-2024-23307",
               url: "https://bugzilla.suse.com/1219169",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220145 for CVE-2024-23307",
               url: "https://bugzilla.suse.com/1220145",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2024-23307",
      },
      {
         cve: "CVE-2024-23848",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-23848",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-23848",
               url: "https://www.suse.com/security/cve/CVE-2024-23848",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219104 for CVE-2024-23848",
               url: "https://bugzilla.suse.com/1219104",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-23848",
      },
      {
         cve: "CVE-2024-24855",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-24855",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.\n\n\n\n\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-24855",
               url: "https://www.suse.com/security/cve/CVE-2024-24855",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219618 for CVE-2024-24855",
               url: "https://bugzilla.suse.com/1219618",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-24855",
      },
      {
         cve: "CVE-2024-24861",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-24861",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue.\n\n\n\n\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-24861",
               url: "https://www.suse.com/security/cve/CVE-2024-24861",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219623 for CVE-2024-24861",
               url: "https://bugzilla.suse.com/1219623",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-24861",
      },
      {
         cve: "CVE-2024-26614",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26614",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: make sure init the accept_queue's spinlocks once\n\nWhen I run syz's reproduction C program locally, it causes the following\nissue:\npvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0!\nWARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508)\nHardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011\nRIP: 0010:__pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508)\nCode: 73 56 3a ff 90 c3 cc cc cc cc 8b 05 bb 1f 48 01 85 c0 74 05 c3 cc cc cc cc 8b 17 48 89 fe 48 c7 c7\n30 20 ce 8f e8 ad 56 42 ff <0f> 0b c3 cc cc cc cc 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffa8d200604cb8 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9d1ef60e0908\nRDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff9d1ef60e0900\nRBP: ffff9d181cd5c280 R08: 0000000000000000 R09: 00000000ffff7fff\nR10: ffffa8d200604b68 R11: ffffffff907dcdc8 R12: 0000000000000000\nR13: ffff9d181cd5c660 R14: ffff9d1813a3f330 R15: 0000000000001000\nFS:  00007fa110184640(0000) GS:ffff9d1ef60c0000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000020000000 CR3: 000000011f65e000 CR4: 00000000000006f0\nCall Trace:\n<IRQ>\n  _raw_spin_unlock (kernel/locking/spinlock.c:186)\n  inet_csk_reqsk_queue_add (net/ipv4/inet_connection_sock.c:1321)\n  inet_csk_complete_hashdance (net/ipv4/inet_connection_sock.c:1358)\n  tcp_check_req (net/ipv4/tcp_minisocks.c:868)\n  tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2260)\n  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205)\n  ip_local_deliver_finish (net/ipv4/ip_input.c:234)\n  __netif_receive_skb_one_core (net/core/dev.c:5529)\n  process_backlog (./include/linux/rcupdate.h:779)\n  __napi_poll (net/core/dev.c:6533)\n  net_rx_action (net/core/dev.c:6604)\n  __do_softirq (./arch/x86/include/asm/jump_label.h:27)\n  do_softirq (kernel/softirq.c:454 kernel/softirq.c:441)\n</IRQ>\n<TASK>\n  __local_bh_enable_ip (kernel/softirq.c:381)\n  __dev_queue_xmit (net/core/dev.c:4374)\n  ip_finish_output2 (./include/net/neighbour.h:540 net/ipv4/ip_output.c:235)\n  __ip_queue_xmit (net/ipv4/ip_output.c:535)\n  __tcp_transmit_skb (net/ipv4/tcp_output.c:1462)\n  tcp_rcv_synsent_state_process (net/ipv4/tcp_input.c:6469)\n  tcp_rcv_state_process (net/ipv4/tcp_input.c:6657)\n  tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929)\n  __release_sock (./include/net/sock.h:1121 net/core/sock.c:2968)\n  release_sock (net/core/sock.c:3536)\n  inet_wait_for_connect (net/ipv4/af_inet.c:609)\n  __inet_stream_connect (net/ipv4/af_inet.c:702)\n  inet_stream_connect (net/ipv4/af_inet.c:748)\n  __sys_connect (./include/linux/file.h:45 net/socket.c:2064)\n  __x64_sys_connect (net/socket.c:2073 net/socket.c:2070 net/socket.c:2070)\n  do_syscall_64 (arch/x86/entry/common.c:51 arch/x86/entry/common.c:82)\n  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129)\n  RIP: 0033:0x7fa10ff05a3d\n  Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89\n  c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ab a3 0e 00 f7 d8 64 89 01 48\n  RSP: 002b:00007fa110183de8 EFLAGS: 00000202 ORIG_RAX: 000000000000002a\n  RAX: ffffffffffffffda RBX: 0000000020000054 RCX: 00007fa10ff05a3d\n  RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003\n  RBP: 00007fa110183e20 R08: 0000000000000000 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa110184640\n  R13: 0000000000000000 R14: 00007fa10fe8b060 R15: 00007fff73e23b20\n</TASK>\n\nThe issue triggering process is analyzed as follows:\nThread A                                       Thread B\ntcp_v4_rcv\t//receive ack TCP packet       inet_shutdown\n  tcp_check_req                                  tcp_disconnect //disconnect sock\n  ...                                              tcp_set_state(sk, TCP_CLOSE)\n    inet_csk_complete_hashdance                ...\n      inet_csk_reqsk_queue_add         \n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26614",
               url: "https://www.suse.com/security/cve/CVE-2024-26614",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221293 for CVE-2024-26614",
               url: "https://bugzilla.suse.com/1221293",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26614",
      },
      {
         cve: "CVE-2024-26642",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26642",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: disallow anonymous set with timeout flag\n\nAnonymous sets are never used with timeout from userspace, reject this.\nException to this rule is NFT_SET_EVAL to ensure legacy meters still work.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26642",
               url: "https://www.suse.com/security/cve/CVE-2024-26642",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221830 for CVE-2024-26642",
               url: "https://bugzilla.suse.com/1221830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26642",
      },
      {
         cve: "CVE-2024-26651",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26651",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsr9800: Add check for usbnet_get_endpoints\n\nAdd check for usbnet_get_endpoints() and return the error if it fails\nin order to transfer the error.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26651",
               url: "https://www.suse.com/security/cve/CVE-2024-26651",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221337 for CVE-2024-26651",
               url: "https://bugzilla.suse.com/1221337",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26651",
      },
      {
         cve: "CVE-2024-26671",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26671",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-mq: fix IO hang from sbitmap wakeup race\n\nIn blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered\nwith the following blk_mq_get_driver_tag() in case of getting driver\ntag failure.\n\nThen in __sbitmap_queue_wake_up(), waitqueue_active() may not observe\nthe added waiter in blk_mq_mark_tag_wait() and wake up nothing, meantime\nblk_mq_mark_tag_wait() can't get driver tag successfully.\n\nThis issue can be reproduced by running the following test in loop, and\nfio hang can be observed in < 30min when running it on my test VM\nin laptop.\n\n\tmodprobe -r scsi_debug\n\tmodprobe scsi_debug delay=0 dev_size_mb=4096 max_queue=1 host_max_queue=1 submit_queues=4\n\tdev=`ls -d /sys/bus/pseudo/drivers/scsi_debug/adapter*/host*/target*/*/block/* | head -1 | xargs basename`\n\tfio --filename=/dev/\"$dev\" --direct=1 --rw=randrw --bs=4k --iodepth=1 \\\n       \t\t--runtime=100 --numjobs=40 --time_based --name=test \\\n        \t--ioengine=libaio\n\nFix the issue by adding one explicit barrier in blk_mq_mark_tag_wait(), which\nis just fine in case of running out of tag.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26671",
               url: "https://www.suse.com/security/cve/CVE-2024-26671",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222357 for CVE-2024-26671",
               url: "https://bugzilla.suse.com/1222357",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26671",
      },
      {
         cve: "CVE-2024-26675",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26675",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nppp_async: limit MRU to 64K\n\nsyzbot triggered a warning [1] in __alloc_pages():\n\nWARN_ON_ONCE_GFP(order > MAX_PAGE_ORDER, gfp)\n\nWillem fixed a similar issue in commit c0a2a1b0d631 (\"ppp: limit MRU to 64K\")\n\nAdopt the same sanity check for ppp_async_ioctl(PPPIOCSMRU)\n\n[1]:\n\n WARNING: CPU: 1 PID: 11 at mm/page_alloc.c:4543 __alloc_pages+0x308/0x698 mm/page_alloc.c:4543\nModules linked in:\nCPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted 6.8.0-rc2-syzkaller-g41bccc98fb79 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\nWorkqueue: events_unbound flush_to_ldisc\npstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : __alloc_pages+0x308/0x698 mm/page_alloc.c:4543\n lr : __alloc_pages+0xc8/0x698 mm/page_alloc.c:4537\nsp : ffff800093967580\nx29: ffff800093967660 x28: ffff8000939675a0 x27: dfff800000000000\nx26: ffff70001272ceb4 x25: 0000000000000000 x24: ffff8000939675c0\nx23: 0000000000000000 x22: 0000000000060820 x21: 1ffff0001272ceb8\nx20: ffff8000939675e0 x19: 0000000000000010 x18: ffff800093967120\nx17: ffff800083bded5c x16: ffff80008ac97500 x15: 0000000000000005\nx14: 1ffff0001272cebc x13: 0000000000000000 x12: 0000000000000000\nx11: ffff70001272cec1 x10: 1ffff0001272cec0 x9 : 0000000000000001\nx8 : ffff800091c91000 x7 : 0000000000000000 x6 : 000000000000003f\nx5 : 00000000ffffffff x4 : 0000000000000000 x3 : 0000000000000020\nx2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff8000939675e0\nCall trace:\n  __alloc_pages+0x308/0x698 mm/page_alloc.c:4543\n  __alloc_pages_node include/linux/gfp.h:238 [inline]\n  alloc_pages_node include/linux/gfp.h:261 [inline]\n  __kmalloc_large_node+0xbc/0x1fc mm/slub.c:3926\n  __do_kmalloc_node mm/slub.c:3969 [inline]\n  __kmalloc_node_track_caller+0x418/0x620 mm/slub.c:4001\n  kmalloc_reserve+0x17c/0x23c net/core/skbuff.c:590\n  __alloc_skb+0x1c8/0x3d8 net/core/skbuff.c:651\n  __netdev_alloc_skb+0xb8/0x3e8 net/core/skbuff.c:715\n  netdev_alloc_skb include/linux/skbuff.h:3235 [inline]\n  dev_alloc_skb include/linux/skbuff.h:3248 [inline]\n  ppp_async_input drivers/net/ppp/ppp_async.c:863 [inline]\n  ppp_asynctty_receive+0x588/0x186c drivers/net/ppp/ppp_async.c:341\n  tty_ldisc_receive_buf+0x12c/0x15c drivers/tty/tty_buffer.c:390\n  tty_port_default_receive_buf+0x74/0xac drivers/tty/tty_port.c:37\n  receive_buf drivers/tty/tty_buffer.c:444 [inline]\n  flush_to_ldisc+0x284/0x6e4 drivers/tty/tty_buffer.c:494\n  process_one_work+0x694/0x1204 kernel/workqueue.c:2633\n  process_scheduled_works kernel/workqueue.c:2706 [inline]\n  worker_thread+0x938/0xef4 kernel/workqueue.c:2787\n  kthread+0x288/0x310 kernel/kthread.c:388\n  ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26675",
               url: "https://www.suse.com/security/cve/CVE-2024-26675",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222379 for CVE-2024-26675",
               url: "https://bugzilla.suse.com/1222379",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26675",
      },
      {
         cve: "CVE-2024-26689",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26689",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: prevent use-after-free in encode_cap_msg()\n\nIn fs/ceph/caps.c, in encode_cap_msg(), \"use after free\" error was\ncaught by KASAN at this line - 'ceph_buffer_get(arg->xattr_buf);'. This\nimplies before the refcount could be increment here, it was freed.\n\nIn same file, in \"handle_cap_grant()\" refcount is decremented by this\nline - 'ceph_buffer_put(ci->i_xattrs.blob);'. It appears that a race\noccurred and resource was freed by the latter line before the former\nline could increment it.\n\nencode_cap_msg() is called by __send_cap() and __send_cap() is called by\nceph_check_caps() after calling __prep_cap(). __prep_cap() is where\narg->xattr_buf is assigned to ci->i_xattrs.blob. This is the spot where\nthe refcount must be increased to prevent \"use after free\" error.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26689",
               url: "https://www.suse.com/security/cve/CVE-2024-26689",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222503 for CVE-2024-26689",
               url: "https://bugzilla.suse.com/1222503",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26689",
      },
      {
         cve: "CVE-2024-26704",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26704",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix double-free of blocks due to wrong extents moved_len\n\nIn ext4_move_extents(), moved_len is only updated when all moves are\nsuccessfully executed, and only discards orig_inode and donor_inode\npreallocations when moved_len is not zero. When the loop fails to exit\nafter successfully moving some extents, moved_len is not updated and\nremains at 0, so it does not discard the preallocations.\n\nIf the moved extents overlap with the preallocated extents, the\noverlapped extents are freed twice in ext4_mb_release_inode_pa() and\next4_process_freed_data() (as described in commit 94d7c16cbbbd (\"ext4:\nFix double-free of blocks with EXT4_IOC_MOVE_EXT\")), and bb_free is\nincremented twice. Hence when trim is executed, a zero-division bug is\ntriggered in mb_update_avg_fragment_size() because bb_free is not zero\nand bb_fragments is zero.\n\nTherefore, update move_len after each extent move to avoid the issue.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26704",
               url: "https://www.suse.com/security/cve/CVE-2024-26704",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222422 for CVE-2024-26704",
               url: "https://bugzilla.suse.com/1222422",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26704",
      },
      {
         cve: "CVE-2024-26733",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26733",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\narp: Prevent overflow in arp_req_get().\n\nsyzkaller reported an overflown write in arp_req_get(). [0]\n\nWhen ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour\nentry and copies neigh->ha to struct arpreq.arp_ha.sa_data.\n\nThe arp_ha here is struct sockaddr, not struct sockaddr_storage, so\nthe sa_data buffer is just 14 bytes.\n\nIn the splat below, 2 bytes are overflown to the next int field,\narp_flags.  We initialise the field just after the memcpy(), so it's\nnot a problem.\n\nHowever, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN),\narp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL)\nin arp_ioctl() before calling arp_req_get().\n\nTo avoid the overflow, let's limit the max length of memcpy().\n\nNote that commit b5f0de6df6dc (\"net: dev: Convert sa_data to flexible\narray in struct sockaddr\") just silenced syzkaller.\n\n[0]:\nmemcpy: detected field-spanning write (size 16) of single field \"r->arp_ha.sa_data\" at net/ipv4/arp.c:1128 (size 14)\nWARNING: CPU: 0 PID: 144638 at net/ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128\nModules linked in:\nCPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014\nRIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128\nCode: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb <0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6\nRSP: 0018:ffffc900050b7998 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001\nRBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000\nR13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010\nFS:  00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n <TASK>\n arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261\n inet_ioctl+0x314/0x3a0 net/ipv4/af_inet.c:981\n sock_do_ioctl+0xdf/0x260 net/socket.c:1204\n sock_ioctl+0x3ef/0x650 net/socket.c:1321\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:870 [inline]\n __se_sys_ioctl fs/ioctl.c:856 [inline]\n __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x37/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x64/0xce\nRIP: 0033:0x7f172b262b8d\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d\nRDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003\nRBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000\n </TASK>",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26733",
               url: "https://www.suse.com/security/cve/CVE-2024-26733",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222585 for CVE-2024-26733",
               url: "https://bugzilla.suse.com/1222585",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26733",
      },
      {
         cve: "CVE-2024-26739",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26739",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_mirred: don't override retval if we already lost the skb\n\nIf we're redirecting the skb, and haven't called tcf_mirred_forward(),\nyet, we need to tell the core to drop the skb by setting the retcode\nto SHOT. If we have called tcf_mirred_forward(), however, the skb\nis out of our hands and returning SHOT will lead to UaF.\n\nMove the retval override to the error path which actually need it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26739",
               url: "https://www.suse.com/security/cve/CVE-2024-26739",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222559 for CVE-2024-26739",
               url: "https://bugzilla.suse.com/1222559",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26739",
      },
      {
         cve: "CVE-2024-26743",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26743",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/qedr: Fix qedr_create_user_qp error flow\n\nAvoid the following warning by making sure to free the allocated\nresources in case that qedr_init_user_queue() fail.\n\n-----------[ cut here ]-----------\nWARNING: CPU: 0 PID: 143192 at drivers/infiniband/core/rdma_core.c:874 uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs]\nModules linked in: tls target_core_user uio target_core_pscsi target_core_file target_core_iblock ib_srpt ib_srp scsi_transport_srp nfsd nfs_acl rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs 8021q garp mrp stp llc ext4 mbcache jbd2 opa_vnic ib_umad ib_ipoib sunrpc rdma_ucm ib_isert iscsi_target_mod target_core_mod ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm hfi1 intel_rapl_msr intel_rapl_common mgag200 qedr sb_edac drm_shmem_helper rdmavt x86_pkg_temp_thermal drm_kms_helper intel_powerclamp ib_uverbs coretemp i2c_algo_bit kvm_intel dell_wmi_descriptor ipmi_ssif sparse_keymap kvm ib_core rfkill syscopyarea sysfillrect video sysimgblt irqbypass ipmi_si ipmi_devintf fb_sys_fops rapl iTCO_wdt mxm_wmi iTCO_vendor_support intel_cstate pcspkr dcdbas intel_uncore ipmi_msghandler lpc_ich acpi_power_meter mei_me mei fuse drm xfs libcrc32c qede sd_mod ahci libahci t10_pi sg crct10dif_pclmul crc32_pclmul crc32c_intel qed libata tg3\nghash_clmulni_intel megaraid_sas crc8 wmi [last unloaded: ib_srpt]\nCPU: 0 PID: 143192 Comm: fi_rdm_tagged_p Kdump: loaded Not tainted 5.14.0-408.el9.x86_64 #1\nHardware name: Dell Inc. PowerEdge R430/03XKDV, BIOS 2.14.0 01/25/2022\nRIP: 0010:uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs]\nCode: 5d 41 5c 41 5d 41 5e e9 0f 26 1b dd 48 89 df e8 67 6a ff ff 49 8b 86 10 01 00 00 48 85 c0 74 9c 4c 89 e7 e8 83 c0 cb dd eb 92 <0f> 0b eb be 0f 0b be 04 00 00 00 48 89 df e8 8e f5 ff ff e9 6d ff\nRSP: 0018:ffffb7c6cadfbc60 EFLAGS: 00010286\nRAX: ffff8f0889ee3f60 RBX: ffff8f088c1a5200 RCX: 00000000802a0016\nRDX: 00000000802a0017 RSI: 0000000000000001 RDI: ffff8f0880042600\nRBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000\nR10: ffff8f11fffd5000 R11: 0000000000039000 R12: ffff8f0d5b36cd80\nR13: ffff8f088c1a5250 R14: ffff8f1206d91000 R15: 0000000000000000\nFS: 0000000000000000(0000) GS:ffff8f11d7c00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000147069200e20 CR3: 00000001c7210002 CR4: 00000000001706f0\nCall Trace:\n<TASK>\n? show_trace_log_lvl+0x1c4/0x2df\n? show_trace_log_lvl+0x1c4/0x2df\n? ib_uverbs_close+0x1f/0xb0 [ib_uverbs]\n? uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs]\n? __warn+0x81/0x110\n? uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs]\n? report_bug+0x10a/0x140\n? handle_bug+0x3c/0x70\n? exc_invalid_op+0x14/0x70\n? asm_exc_invalid_op+0x16/0x20\n? uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs]\nib_uverbs_close+0x1f/0xb0 [ib_uverbs]\n__fput+0x94/0x250\ntask_work_run+0x5c/0x90\ndo_exit+0x270/0x4a0\ndo_group_exit+0x2d/0x90\nget_signal+0x87c/0x8c0\narch_do_signal_or_restart+0x25/0x100\n? ib_uverbs_ioctl+0xc2/0x110 [ib_uverbs]\nexit_to_user_mode_loop+0x9c/0x130\nexit_to_user_mode_prepare+0xb6/0x100\nsyscall_exit_to_user_mode+0x12/0x40\ndo_syscall_64+0x69/0x90\n? syscall_exit_work+0x103/0x130\n? syscall_exit_to_user_mode+0x22/0x40\n? do_syscall_64+0x69/0x90\n? syscall_exit_work+0x103/0x130\n? syscall_exit_to_user_mode+0x22/0x40\n? do_syscall_64+0x69/0x90\n? do_syscall_64+0x69/0x90\n? common_interrupt+0x43/0xa0\nentry_SYSCALL_64_after_hwframe+0x72/0xdc\nRIP: 0033:0x1470abe3ec6b\nCode: Unable to access opcode bytes at RIP 0x1470abe3ec41.\nRSP: 002b:00007fff13ce9108 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: fffffffffffffffc RBX: 00007fff13ce9218 RCX: 00001470abe3ec6b\nRDX: 00007fff13ce9200 RSI: 00000000c0181b01 RDI: 0000000000000004\nRBP: 00007fff13ce91e0 R08: 0000558d9655da10 R09: 0000558d9655dd00\nR10: 00007fff13ce95c0 R11: 0000000000000246 R12: 00007fff13ce9358\nR13: 0000000000000013 R14: 0000558d9655db50 R15: 00007fff13ce9470\n</TASK>\n--[ end trace 888a9b92e04c5c97 ]--",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26743",
               url: "https://www.suse.com/security/cve/CVE-2024-26743",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222677 for CVE-2024-26743",
               url: "https://bugzilla.suse.com/1222677",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2024-26743",
      },
      {
         cve: "CVE-2024-26744",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26744",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: Support specifying the srpt_service_guid parameter\n\nMake loading ib_srpt with this parameter set work. The current behavior is\nthat setting that parameter while loading the ib_srpt kernel module\ntriggers the following kernel crash:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCall Trace:\n <TASK>\n parse_one+0x18c/0x1d0\n parse_args+0xe1/0x230\n load_module+0x8de/0xa60\n init_module_from_file+0x8b/0xd0\n idempotent_init_module+0x181/0x240\n __x64_sys_finit_module+0x5a/0xb0\n do_syscall_64+0x5f/0xe0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26744",
               url: "https://www.suse.com/security/cve/CVE-2024-26744",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222449 for CVE-2024-26744",
               url: "https://bugzilla.suse.com/1222449",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26744",
      },
      {
         cve: "CVE-2024-26747",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26747",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: roles: fix NULL pointer issue when put module's reference\n\nIn current design, usb role class driver will get usb_role_switch parent's\nmodule reference after the user get usb_role_switch device and put the\nreference after the user put the usb_role_switch device. However, the\nparent device of usb_role_switch may be removed before the user put the\nusb_role_switch. If so, then, NULL pointer issue will be met when the user\nput the parent module's reference.\n\nThis will save the module pointer in structure of usb_role_switch. Then,\nwe don't need to find module by iterating long relations.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26747",
               url: "https://www.suse.com/security/cve/CVE-2024-26747",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222609 for CVE-2024-26747",
               url: "https://bugzilla.suse.com/1222609",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26747",
      },
      {
         cve: "CVE-2024-26754",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26754",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()\n\nThe gtp_net_ops pernet operations structure for the subsystem must be\nregistered before registering the generic netlink family.\n\nSyzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:\n\ngeneral protection fault, probably for non-canonical address\n0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN NOPTI\nKASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\nCPU: 1 PID: 5826 Comm: gtp Not tainted 6.8.0-rc3-std-def-alt1 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014\nRIP: 0010:gtp_genl_dump_pdp+0x1be/0x800 [gtp]\nCode: c6 89 c6 e8 64 e9 86 df 58 45 85 f6 0f 85 4e 04 00 00 e8 c5 ee 86\n      df 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80>\n      3c 02 00 0f 85 de 05 00 00 48 8b 44 24 18 4c 8b 30 4c 39 f0 74\nRSP: 0018:ffff888014107220 EFLAGS: 00010202\nRAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000\nRDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000\nRBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000\nR13: ffff88800fcda588 R14: 0000000000000001 R15: 0000000000000000\nFS:  00007f1be4eb05c0(0000) GS:ffff88806ce80000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f1be4e766cf CR3: 000000000c33e000 CR4: 0000000000750ef0\nPKRU: 55555554\nCall Trace:\n <TASK>\n ? show_regs+0x90/0xa0\n ? die_addr+0x50/0xd0\n ? exc_general_protection+0x148/0x220\n ? asm_exc_general_protection+0x22/0x30\n ? gtp_genl_dump_pdp+0x1be/0x800 [gtp]\n ? __alloc_skb+0x1dd/0x350\n ? __pfx___alloc_skb+0x10/0x10\n genl_dumpit+0x11d/0x230\n netlink_dump+0x5b9/0xce0\n ? lockdep_hardirqs_on_prepare+0x253/0x430\n ? __pfx_netlink_dump+0x10/0x10\n ? kasan_save_track+0x10/0x40\n ? __kasan_kmalloc+0x9b/0xa0\n ? genl_start+0x675/0x970\n __netlink_dump_start+0x6fc/0x9f0\n genl_family_rcv_msg_dumpit+0x1bb/0x2d0\n ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10\n ? genl_op_from_small+0x2a/0x440\n ? cap_capable+0x1d0/0x240\n ? __pfx_genl_start+0x10/0x10\n ? __pfx_genl_dumpit+0x10/0x10\n ? __pfx_genl_done+0x10/0x10\n ? security_capable+0x9d/0xe0",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26754",
               url: "https://www.suse.com/security/cve/CVE-2024-26754",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222632 for CVE-2024-26754",
               url: "https://bugzilla.suse.com/1222632",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26754",
      },
      {
         cve: "CVE-2024-26763",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26763",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don't modify the data when using authenticated encryption\n\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\n\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26763",
               url: "https://www.suse.com/security/cve/CVE-2024-26763",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222720 for CVE-2024-26763",
               url: "https://bugzilla.suse.com/1222720",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26763",
      },
      {
         cve: "CVE-2024-26771",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26771",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: ti: edma: Add some null pointer checks to the edma_probe\n\ndevm_kasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure. Ensure the allocation was successful\nby checking the pointer validity.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26771",
               url: "https://www.suse.com/security/cve/CVE-2024-26771",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222610 for CVE-2024-26771",
               url: "https://bugzilla.suse.com/1222610",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26771",
      },
      {
         cve: "CVE-2024-26772",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26772",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\n\nPlaces the logic for checking if the group's block bitmap is corrupt under\nthe protection of the group lock to avoid allocating blocks from the group\nwith a corrupted block bitmap.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26772",
               url: "https://www.suse.com/security/cve/CVE-2024-26772",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222613 for CVE-2024-26772",
               url: "https://bugzilla.suse.com/1222613",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26772",
      },
      {
         cve: "CVE-2024-26773",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26773",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n\nDetermine if the group block bitmap is corrupted before using ac_b_ex in\next4_mb_try_best_found() to avoid allocating blocks from a group with a\ncorrupted block bitmap in the following concurrency and making the\nsituation worse.\n\next4_mb_regular_allocator\n  ext4_lock_group(sb, group)\n  ext4_mb_good_group\n   // check if the group bbitmap is corrupted\n  ext4_mb_complex_scan_group\n   // Scan group gets ac_b_ex but doesn't use it\n  ext4_unlock_group(sb, group)\n                           ext4_mark_group_bitmap_corrupted(group)\n                           // The block bitmap was corrupted during\n                           // the group unlock gap.\n  ext4_mb_try_best_found\n    ext4_lock_group(ac->ac_sb, group)\n    ext4_mb_use_best_found\n      mb_mark_used\n      // Allocating blocks in block bitmap corrupted group",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26773",
               url: "https://www.suse.com/security/cve/CVE-2024-26773",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222618 for CVE-2024-26773",
               url: "https://bugzilla.suse.com/1222618",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26773",
      },
      {
         cve: "CVE-2024-26777",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26777",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sis: Error out if pixclock equals zero\n\nThe userspace program could pass any values to the driver through\nioctl() interface. If the driver doesn't check the value of pixclock,\nit may cause divide-by-zero error.\n\nIn sisfb_check_var(), var->pixclock is used as a divisor to caculate\ndrate before it is checked against zero. Fix this by checking it\nat the beginning.\n\nThis is similar to CVE-2022-3061 in i740fb which was fixed by\ncommit 15cf0b8.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26777",
               url: "https://www.suse.com/security/cve/CVE-2024-26777",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222765 for CVE-2024-26777",
               url: "https://bugzilla.suse.com/1222765",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26777",
      },
      {
         cve: "CVE-2024-26778",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26778",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: savage: Error out if pixclock equals zero\n\nThe userspace program could pass any values to the driver through\nioctl() interface. If the driver doesn't check the value of pixclock,\nit may cause divide-by-zero error.\n\nAlthough pixclock is checked in savagefb_decode_var(), but it is not\nchecked properly in savagefb_probe(). Fix this by checking whether\npixclock is zero in the function savagefb_check_var() before\ninfo->var.pixclock is used as the divisor.\n\nThis is similar to CVE-2022-3061 in i740fb which was fixed by\ncommit 15cf0b8.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26778",
               url: "https://www.suse.com/security/cve/CVE-2024-26778",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222770 for CVE-2024-26778",
               url: "https://bugzilla.suse.com/1222770",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26778",
      },
      {
         cve: "CVE-2024-26779",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26779",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix race condition on enabling fast-xmit\n\nfast-xmit must only be enabled after the sta has been uploaded to the driver,\notherwise it could end up passing the not-yet-uploaded sta via drv_tx calls\nto the driver, leading to potential crashes because of uninitialized drv_priv\ndata.\nAdd a missing sta->uploaded check and re-check fast xmit after inserting a sta.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26779",
               url: "https://www.suse.com/security/cve/CVE-2024-26779",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222772 for CVE-2024-26779",
               url: "https://bugzilla.suse.com/1222772",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26779",
      },
      {
         cve: "CVE-2024-26793",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26793",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: fix use-after-free and null-ptr-deref in gtp_newlink()\n\nThe gtp_link_ops operations structure for the subsystem must be\nregistered after registering the gtp_net_ops pernet operations structure.\n\nSyzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:\n\n[ 1010.702740] gtp: GTP module unloaded\n[ 1010.715877] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI\n[ 1010.715888] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\n[ 1010.715895] CPU: 1 PID: 128616 Comm: a.out Not tainted 6.8.0-rc6-std-def-alt1 #1\n[ 1010.715899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014\n[ 1010.715908] RIP: 0010:gtp_newlink+0x4d7/0x9c0 [gtp]\n[ 1010.715915] Code: 80 3c 02 00 0f 85 41 04 00 00 48 8b bb d8 05 00 00 e8 ed f6 ff ff 48 89 c2 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4f 04 00 00 4c 89 e2 4c 8b 6d 00 48 b8 00 00 00\n[ 1010.715920] RSP: 0018:ffff888020fbf180 EFLAGS: 00010203\n[ 1010.715929] RAX: dffffc0000000000 RBX: ffff88800399c000 RCX: 0000000000000000\n[ 1010.715933] RDX: 0000000000000001 RSI: ffffffff84805280 RDI: 0000000000000282\n[ 1010.715938] RBP: 000000000000000d R08: 0000000000000001 R09: 0000000000000000\n[ 1010.715942] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800399cc80\n[ 1010.715947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000400\n[ 1010.715953] FS:  00007fd1509ab5c0(0000) GS:ffff88805b300000(0000) knlGS:0000000000000000\n[ 1010.715958] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1010.715962] CR2: 0000000000000000 CR3: 000000001c07a000 CR4: 0000000000750ee0\n[ 1010.715968] PKRU: 55555554\n[ 1010.715972] Call Trace:\n[ 1010.715985]  ? __die_body.cold+0x1a/0x1f\n[ 1010.715995]  ? die_addr+0x43/0x70\n[ 1010.716002]  ? exc_general_protection+0x199/0x2f0\n[ 1010.716016]  ? asm_exc_general_protection+0x1e/0x30\n[ 1010.716026]  ? gtp_newlink+0x4d7/0x9c0 [gtp]\n[ 1010.716034]  ? gtp_net_exit+0x150/0x150 [gtp]\n[ 1010.716042]  __rtnl_newlink+0x1063/0x1700\n[ 1010.716051]  ? rtnl_setlink+0x3c0/0x3c0\n[ 1010.716063]  ? is_bpf_text_address+0xc0/0x1f0\n[ 1010.716070]  ? kernel_text_address.part.0+0xbb/0xd0\n[ 1010.716076]  ? __kernel_text_address+0x56/0xa0\n[ 1010.716084]  ? unwind_get_return_address+0x5a/0xa0\n[ 1010.716091]  ? create_prof_cpu_mask+0x30/0x30\n[ 1010.716098]  ? arch_stack_walk+0x9e/0xf0\n[ 1010.716106]  ? stack_trace_save+0x91/0xd0\n[ 1010.716113]  ? stack_trace_consume_entry+0x170/0x170\n[ 1010.716121]  ? __lock_acquire+0x15c5/0x5380\n[ 1010.716139]  ? mark_held_locks+0x9e/0xe0\n[ 1010.716148]  ? kmem_cache_alloc_trace+0x35f/0x3c0\n[ 1010.716155]  ? __rtnl_newlink+0x1700/0x1700\n[ 1010.716160]  rtnl_newlink+0x69/0xa0\n[ 1010.716166]  rtnetlink_rcv_msg+0x43b/0xc50\n[ 1010.716172]  ? rtnl_fdb_dump+0x9f0/0x9f0\n[ 1010.716179]  ? lock_acquire+0x1fe/0x560\n[ 1010.716188]  ? netlink_deliver_tap+0x12f/0xd50\n[ 1010.716196]  netlink_rcv_skb+0x14d/0x440\n[ 1010.716202]  ? rtnl_fdb_dump+0x9f0/0x9f0\n[ 1010.716208]  ? netlink_ack+0xab0/0xab0\n[ 1010.716213]  ? netlink_deliver_tap+0x202/0xd50\n[ 1010.716220]  ? netlink_deliver_tap+0x218/0xd50\n[ 1010.716226]  ? __virt_addr_valid+0x30b/0x590\n[ 1010.716233]  netlink_unicast+0x54b/0x800\n[ 1010.716240]  ? netlink_attachskb+0x870/0x870\n[ 1010.716248]  ? __check_object_size+0x2de/0x3b0\n[ 1010.716254]  netlink_sendmsg+0x938/0xe40\n[ 1010.716261]  ? netlink_unicast+0x800/0x800\n[ 1010.716269]  ? __import_iovec+0x292/0x510\n[ 1010.716276]  ? netlink_unicast+0x800/0x800\n[ 1010.716284]  __sock_sendmsg+0x159/0x190\n[ 1010.716290]  ____sys_sendmsg+0x712/0x880\n[ 1010.716297]  ? sock_write_iter+0x3d0/0x3d0\n[ 1010.716304]  ? __ia32_sys_recvmmsg+0x270/0x270\n[ 1010.716309]  ? lock_acquire+0x1fe/0x560\n[ 1010.716315]  ? drain_array_locked+0x90/0x90\n[ 1010.716324]  ___sys_sendmsg+0xf8/0x170\n[ 1010.716331]  ? sendmsg_copy_msghdr+0x170/0x170\n[ 1010.716337]  ? lockdep_init_map\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26793",
               url: "https://www.suse.com/security/cve/CVE-2024-26793",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222428 for CVE-2024-26793",
               url: "https://bugzilla.suse.com/1222428",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26793",
      },
      {
         cve: "CVE-2024-26805",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26805",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: Fix kernel-infoleak-after-free in __skb_datagram_iter\n\nsyzbot reported the following uninit-value access issue [1]:\n\nnetlink_to_full_skb() creates a new `skb` and puts the `skb->data`\npassed as a 1st arg of netlink_to_full_skb() onto new `skb`. The data\nsize is specified as `len` and passed to skb_put_data(). This `len`\nis based on `skb->end` that is not data offset but buffer offset. The\n`skb->end` contains data and tailroom. Since the tailroom is not\ninitialized when the new `skb` created, KMSAN detects uninitialized\nmemory area when copying the data.\n\nThis patch resolved this issue by correct the len from `skb->end` to\n`skb->len`, which is the actual data offset.\n\nBUG: KMSAN: kernel-infoleak-after-free in instrument_copy_to_user include/linux/instrumented.h:114 [inline]\nBUG: KMSAN: kernel-infoleak-after-free in copy_to_user_iter lib/iov_iter.c:24 [inline]\nBUG: KMSAN: kernel-infoleak-after-free in iterate_ubuf include/linux/iov_iter.h:29 [inline]\nBUG: KMSAN: kernel-infoleak-after-free in iterate_and_advance2 include/linux/iov_iter.h:245 [inline]\nBUG: KMSAN: kernel-infoleak-after-free in iterate_and_advance include/linux/iov_iter.h:271 [inline]\nBUG: KMSAN: kernel-infoleak-after-free in _copy_to_iter+0x364/0x2520 lib/iov_iter.c:186\n instrument_copy_to_user include/linux/instrumented.h:114 [inline]\n copy_to_user_iter lib/iov_iter.c:24 [inline]\n iterate_ubuf include/linux/iov_iter.h:29 [inline]\n iterate_and_advance2 include/linux/iov_iter.h:245 [inline]\n iterate_and_advance include/linux/iov_iter.h:271 [inline]\n _copy_to_iter+0x364/0x2520 lib/iov_iter.c:186\n copy_to_iter include/linux/uio.h:197 [inline]\n simple_copy_to_iter+0x68/0xa0 net/core/datagram.c:532\n __skb_datagram_iter+0x123/0xdc0 net/core/datagram.c:420\n skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546\n skb_copy_datagram_msg include/linux/skbuff.h:3960 [inline]\n packet_recvmsg+0xd9c/0x2000 net/packet/af_packet.c:3482\n sock_recvmsg_nosec net/socket.c:1044 [inline]\n sock_recvmsg net/socket.c:1066 [inline]\n sock_read_iter+0x467/0x580 net/socket.c:1136\n call_read_iter include/linux/fs.h:2014 [inline]\n new_sync_read fs/read_write.c:389 [inline]\n vfs_read+0x8f6/0xe00 fs/read_write.c:470\n ksys_read+0x20f/0x4c0 fs/read_write.c:613\n __do_sys_read fs/read_write.c:623 [inline]\n __se_sys_read fs/read_write.c:621 [inline]\n __x64_sys_read+0x93/0xd0 fs/read_write.c:621\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was stored to memory at:\n skb_put_data include/linux/skbuff.h:2622 [inline]\n netlink_to_full_skb net/netlink/af_netlink.c:181 [inline]\n __netlink_deliver_tap_skb net/netlink/af_netlink.c:298 [inline]\n __netlink_deliver_tap+0x5be/0xc90 net/netlink/af_netlink.c:325\n netlink_deliver_tap net/netlink/af_netlink.c:338 [inline]\n netlink_deliver_tap_kernel net/netlink/af_netlink.c:347 [inline]\n netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n netlink_unicast+0x10f1/0x1250 net/netlink/af_netlink.c:1368\n netlink_sendmsg+0x1238/0x13d0 net/netlink/af_netlink.c:1910\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n free_pages_prepare mm/page_alloc.c:1087 [inline]\n free_unref_page_prepare+0xb0/0xa40 mm/page_alloc.c:2347\n free_unref_page_list+0xeb/0x1100 mm/page_alloc.c:2533\n release_pages+0x23d3/0x2410 mm/swap.c:1042\n free_pages_and_swap_cache+0xd9/0xf0 mm/swap_state.c:316\n tlb_batch_pages\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26805",
               url: "https://www.suse.com/security/cve/CVE-2024-26805",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222630 for CVE-2024-26805",
               url: "https://bugzilla.suse.com/1222630",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26805",
      },
      {
         cve: "CVE-2024-26816",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26816",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nx86, relocs: Ignore relocations in .notes section\n\nWhen building with CONFIG_XEN_PV=y, .text symbols are emitted into\nthe .notes section so that Xen can find the \"startup_xen\" entry point.\nThis information is used prior to booting the kernel, so relocations\nare not useful. In fact, performing relocations against the .notes\nsection means that the KASLR base is exposed since /sys/kernel/notes\nis world-readable.\n\nTo avoid leaking the KASLR base without breaking unprivileged tools that\nare expecting to read /sys/kernel/notes, skip performing relocations in\nthe .notes section. The values readable in .notes are then identical to\nthose found in System.map.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26816",
               url: "https://www.suse.com/security/cve/CVE-2024-26816",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222624 for CVE-2024-26816",
               url: "https://bugzilla.suse.com/1222624",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26816",
      },
      {
         cve: "CVE-2024-26817",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26817",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\namdkfd: use calloc instead of kzalloc to avoid integer overflow\n\nThis uses calloc instead of doing the multiplication which might\noverflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26817",
               url: "https://www.suse.com/security/cve/CVE-2024-26817",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222812 for CVE-2024-26817",
               url: "https://bugzilla.suse.com/1222812",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26817",
      },
      {
         cve: "CVE-2024-26839",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26839",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix a memleak in init_credit_return\n\nWhen dma_alloc_coherent fails to allocate dd->cr_base[i].va,\ninit_credit_return should deallocate dd->cr_base and\ndd->cr_base[i] that allocated before. Or those resources\nwould be never freed and a memleak is triggered.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26839",
               url: "https://www.suse.com/security/cve/CVE-2024-26839",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222975 for CVE-2024-26839",
               url: "https://bugzilla.suse.com/1222975",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2024-26839",
      },
      {
         cve: "CVE-2024-26840",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26840",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: fix memory leak in cachefiles_add_cache()\n\nThe following memory leak was reported after unbinding /dev/cachefiles:\n\n==================================================================\nunreferenced object 0xffff9b674176e3c0 (size 192):\n  comm \"cachefilesd2\", pid 680, jiffies 4294881224\n  hex dump (first 32 bytes):\n    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace (crc ea38a44b):\n    [<ffffffff8eb8a1a5>] kmem_cache_alloc+0x2d5/0x370\n    [<ffffffff8e917f86>] prepare_creds+0x26/0x2e0\n    [<ffffffffc002eeef>] cachefiles_determine_cache_security+0x1f/0x120\n    [<ffffffffc00243ec>] cachefiles_add_cache+0x13c/0x3a0\n    [<ffffffffc0025216>] cachefiles_daemon_write+0x146/0x1c0\n    [<ffffffff8ebc4a3b>] vfs_write+0xcb/0x520\n    [<ffffffff8ebc5069>] ksys_write+0x69/0xf0\n    [<ffffffff8f6d4662>] do_syscall_64+0x72/0x140\n    [<ffffffff8f8000aa>] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n==================================================================\n\nPut the reference count of cache_cred in cachefiles_daemon_unbind() to\nfix the problem. And also put cache_cred in cachefiles_add_cache() error\nbranch to avoid memory leaks.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26840",
               url: "https://www.suse.com/security/cve/CVE-2024-26840",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222976 for CVE-2024-26840",
               url: "https://bugzilla.suse.com/1222976",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2024-26840",
      },
      {
         cve: "CVE-2024-26852",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26852",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: avoid possible UAF in ip6_route_mpath_notify()\n\nsyzbot found another use-after-free in ip6_route_mpath_notify() [1]\n\nCommit f7225172f25a (\"net/ipv6: prevent use after free in\nip6_route_mpath_notify\") was not able to fix the root cause.\n\nWe need to defer the fib6_info_release() calls after\nip6_route_mpath_notify(), in the cleanup phase.\n\n[1]\nBUG: KASAN: slab-use-after-free in rt6_fill_node+0x1460/0x1ac0\nRead of size 4 at addr ffff88809a07fc64 by task syz-executor.2/23037\n\nCPU: 0 PID: 23037 Comm: syz-executor.2 Not tainted 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\nCall Trace:\n <TASK>\n  __dump_stack lib/dump_stack.c:88 [inline]\n  dump_stack_lvl+0x1e7/0x2e0 lib/dump_stack.c:106\n  print_address_description mm/kasan/report.c:377 [inline]\n  print_report+0x167/0x540 mm/kasan/report.c:488\n  kasan_report+0x142/0x180 mm/kasan/report.c:601\n rt6_fill_node+0x1460/0x1ac0\n  inet6_rt_notify+0x13b/0x290 net/ipv6/route.c:6184\n  ip6_route_mpath_notify net/ipv6/route.c:5198 [inline]\n  ip6_route_multipath_add net/ipv6/route.c:5404 [inline]\n  inet6_rtm_newroute+0x1d0f/0x2300 net/ipv6/route.c:5517\n  rtnetlink_rcv_msg+0x885/0x1040 net/core/rtnetlink.c:6597\n  netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2543\n  netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n  netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1367\n  netlink_sendmsg+0xa3b/0xd70 net/netlink/af_netlink.c:1908\n  sock_sendmsg_nosec net/socket.c:730 [inline]\n  __sock_sendmsg+0x221/0x270 net/socket.c:745\n  ____sys_sendmsg+0x525/0x7d0 net/socket.c:2584\n  ___sys_sendmsg net/socket.c:2638 [inline]\n  __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2667\n do_syscall_64+0xf9/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\nRIP: 0033:0x7f73dd87dda9\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f73de6550c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f73dd9ac050 RCX: 00007f73dd87dda9\nRDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005\nRBP: 00007f73dd8ca47a R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000006e R14: 00007f73dd9ac050 R15: 00007ffdbdeb7858\n </TASK>\n\nAllocated by task 23037:\n  kasan_save_stack mm/kasan/common.c:47 [inline]\n  kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n  poison_kmalloc_redzone mm/kasan/common.c:372 [inline]\n  __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:389\n  kasan_kmalloc include/linux/kasan.h:211 [inline]\n  __do_kmalloc_node mm/slub.c:3981 [inline]\n  __kmalloc+0x22e/0x490 mm/slub.c:3994\n  kmalloc include/linux/slab.h:594 [inline]\n  kzalloc include/linux/slab.h:711 [inline]\n  fib6_info_alloc+0x2e/0xf0 net/ipv6/ip6_fib.c:155\n  ip6_route_info_create+0x445/0x12b0 net/ipv6/route.c:3758\n  ip6_route_multipath_add net/ipv6/route.c:5298 [inline]\n  inet6_rtm_newroute+0x744/0x2300 net/ipv6/route.c:5517\n  rtnetlink_rcv_msg+0x885/0x1040 net/core/rtnetlink.c:6597\n  netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2543\n  netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n  netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1367\n  netlink_sendmsg+0xa3b/0xd70 net/netlink/af_netlink.c:1908\n  sock_sendmsg_nosec net/socket.c:730 [inline]\n  __sock_sendmsg+0x221/0x270 net/socket.c:745\n  ____sys_sendmsg+0x525/0x7d0 net/socket.c:2584\n  ___sys_sendmsg net/socket.c:2638 [inline]\n  __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2667\n do_syscall_64+0xf9/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\n\nFreed by task 16:\n  kasan_save_stack mm/kasan/common.c:47 [inline]\n  kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n  kasan_save_free_info+0x4e/0x60 mm/kasan/generic.c:640\n  poison_slab_object+0xa6/0xe0 m\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26852",
               url: "https://www.suse.com/security/cve/CVE-2024-26852",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223057 for CVE-2024-26852",
               url: "https://bugzilla.suse.com/1223057",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223059 for CVE-2024-26852",
               url: "https://bugzilla.suse.com/1223059",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2024-26852",
      },
      {
         cve: "CVE-2024-26855",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26855",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()\n\nThe function ice_bridge_setlink() may encounter a NULL pointer dereference\nif nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently\nin nla_for_each_nested(). To address this issue, add a check to ensure that\nbr_spec is not NULL before proceeding with the nested attribute iteration.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26855",
               url: "https://www.suse.com/security/cve/CVE-2024-26855",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223051 for CVE-2024-26855",
               url: "https://bugzilla.suse.com/1223051",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26855",
      },
      {
         cve: "CVE-2024-26857",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26857",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: make sure to pull inner header in geneve_rx()\n\nsyzbot triggered a bug in geneve_rx() [1]\n\nIssue is similar to the one I fixed in commit 8d975c15c0cd\n(\"ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()\")\n\nWe have to save skb->network_header in a temporary variable\nin order to be able to recompute the network_header pointer\nafter a pskb_inet_may_pull() call.\n\npskb_inet_may_pull() makes sure the needed headers are in skb->head.\n\n[1]\nBUG: KMSAN: uninit-value in IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n BUG: KMSAN: uninit-value in geneve_rx drivers/net/geneve.c:279 [inline]\n BUG: KMSAN: uninit-value in geneve_udp_encap_recv+0x36f9/0x3c10 drivers/net/geneve.c:391\n  IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n  geneve_rx drivers/net/geneve.c:279 [inline]\n  geneve_udp_encap_recv+0x36f9/0x3c10 drivers/net/geneve.c:391\n  udp_queue_rcv_one_skb+0x1d39/0x1f20 net/ipv4/udp.c:2108\n  udp_queue_rcv_skb+0x6ae/0x6e0 net/ipv4/udp.c:2186\n  udp_unicast_rcv_skb+0x184/0x4b0 net/ipv4/udp.c:2346\n  __udp4_lib_rcv+0x1c6b/0x3010 net/ipv4/udp.c:2422\n  udp_rcv+0x7d/0xa0 net/ipv4/udp.c:2604\n  ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205\n  ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233\n  NF_HOOK include/linux/netfilter.h:314 [inline]\n  ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254\n  dst_input include/net/dst.h:461 [inline]\n  ip_rcv_finish net/ipv4/ip_input.c:449 [inline]\n  NF_HOOK include/linux/netfilter.h:314 [inline]\n  ip_rcv+0x46f/0x760 net/ipv4/ip_input.c:569\n  __netif_receive_skb_one_core net/core/dev.c:5534 [inline]\n  __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5648\n  process_backlog+0x480/0x8b0 net/core/dev.c:5976\n  __napi_poll+0xe3/0x980 net/core/dev.c:6576\n  napi_poll net/core/dev.c:6645 [inline]\n  net_rx_action+0x8b8/0x1870 net/core/dev.c:6778\n  __do_softirq+0x1b7/0x7c5 kernel/softirq.c:553\n  do_softirq+0x9a/0xf0 kernel/softirq.c:454\n  __local_bh_enable_ip+0x9b/0xa0 kernel/softirq.c:381\n  local_bh_enable include/linux/bottom_half.h:33 [inline]\n  rcu_read_unlock_bh include/linux/rcupdate.h:820 [inline]\n  __dev_queue_xmit+0x2768/0x51c0 net/core/dev.c:4378\n  dev_queue_xmit include/linux/netdevice.h:3171 [inline]\n  packet_xmit+0x9c/0x6b0 net/packet/af_packet.c:276\n  packet_snd net/packet/af_packet.c:3081 [inline]\n  packet_sendmsg+0x8aef/0x9f10 net/packet/af_packet.c:3113\n  sock_sendmsg_nosec net/socket.c:730 [inline]\n  __sock_sendmsg net/socket.c:745 [inline]\n  __sys_sendto+0x735/0xa10 net/socket.c:2191\n  __do_sys_sendto net/socket.c:2203 [inline]\n  __se_sys_sendto net/socket.c:2199 [inline]\n  __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199\n  do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n  do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n  slab_post_alloc_hook mm/slub.c:3819 [inline]\n  slab_alloc_node mm/slub.c:3860 [inline]\n  kmem_cache_alloc_node+0x5cb/0xbc0 mm/slub.c:3903\n  kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n  __alloc_skb+0x352/0x790 net/core/skbuff.c:651\n  alloc_skb include/linux/skbuff.h:1296 [inline]\n  alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6394\n  sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2783\n  packet_alloc_skb net/packet/af_packet.c:2930 [inline]\n  packet_snd net/packet/af_packet.c:3024 [inline]\n  packet_sendmsg+0x70c2/0x9f10 net/packet/af_packet.c:3113\n  sock_sendmsg_nosec net/socket.c:730 [inline]\n  __sock_sendmsg net/socket.c:745 [inline]\n  __sys_sendto+0x735/0xa10 net/socket.c:2191\n  __do_sys_sendto net/socket.c:2203 [inline]\n  __se_sys_sendto net/socket.c:2199 [inline]\n  __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199\n  do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n  do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26857",
               url: "https://www.suse.com/security/cve/CVE-2024-26857",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223058 for CVE-2024-26857",
               url: "https://bugzilla.suse.com/1223058",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26857",
      },
      {
         cve: "CVE-2024-26859",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26859",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/bnx2x: Prevent access to a freed page in page_pool\n\nFix race condition leading to system crash during EEH error handling\n\nDuring EEH error recovery, the bnx2x driver's transmit timeout logic\ncould cause a race condition when handling reset tasks. The\nbnx2x_tx_timeout() schedules reset tasks via bnx2x_sp_rtnl_task(),\nwhich ultimately leads to bnx2x_nic_unload(). In bnx2x_nic_unload()\nSGEs are freed using bnx2x_free_rx_sge_range(). However, this could\noverlap with the EEH driver's attempt to reset the device using\nbnx2x_io_slot_reset(), which also tries to free SGEs. This race\ncondition can result in system crashes due to accessing freed memory\nlocations in bnx2x_free_rx_sge()\n\n799  static inline void bnx2x_free_rx_sge(struct bnx2x *bp,\n800\t\t\t\tstruct bnx2x_fastpath *fp, u16 index)\n801  {\n802\tstruct sw_rx_page *sw_buf = &fp->rx_page_ring[index];\n803     struct page *page = sw_buf->page;\n....\nwhere sw_buf was set to NULL after the call to dma_unmap_page()\nby the preceding thread.\n\n    EEH: Beginning: 'slot_reset'\n    PCI 0011:01:00.0#10000: EEH: Invoking bnx2x->slot_reset()\n    bnx2x: [bnx2x_io_slot_reset:14228(eth1)]IO slot reset initializing...\n    bnx2x 0011:01:00.0: enabling device (0140 -> 0142)\n    bnx2x: [bnx2x_io_slot_reset:14244(eth1)]IO slot reset --> driver unload\n    Kernel attempted to read user page (0) - exploit attempt? (uid: 0)\n    BUG: Kernel NULL pointer dereference on read at 0x00000000\n    Faulting instruction address: 0xc0080000025065fc\n    Oops: Kernel access of bad area, sig: 11 [#1]\n    .....\n    Call Trace:\n    [c000000003c67a20] [c00800000250658c] bnx2x_io_slot_reset+0x204/0x610 [bnx2x] (unreliable)\n    [c000000003c67af0] [c0000000000518a8] eeh_report_reset+0xb8/0xf0\n    [c000000003c67b60] [c000000000052130] eeh_pe_report+0x180/0x550\n    [c000000003c67c70] [c00000000005318c] eeh_handle_normal_event+0x84c/0xa60\n    [c000000003c67d50] [c000000000053a84] eeh_event_handler+0xf4/0x170\n    [c000000003c67da0] [c000000000194c58] kthread+0x1c8/0x1d0\n    [c000000003c67e10] [c00000000000cf64] ret_from_kernel_thread+0x5c/0x64\n\nTo solve this issue, we need to verify page pool allocations before\nfreeing.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26859",
               url: "https://www.suse.com/security/cve/CVE-2024-26859",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223049 for CVE-2024-26859",
               url: "https://bugzilla.suse.com/1223049",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26859",
      },
      {
         cve: "CVE-2024-26878",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26878",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: Fix potential NULL pointer dereference\n\nBelow race may cause NULL pointer dereference\n\nP1\t\t\t\t\tP2\ndquot_free_inode\t\t\tquota_off\n\t\t\t\t\t  drop_dquot_ref\n\t\t\t\t\t   remove_dquot_ref\n\t\t\t\t\t   dquots = i_dquot(inode)\n  dquots = i_dquot(inode)\n  srcu_read_lock\n  dquots[cnt]) != NULL (1)\n\t\t\t\t\t     dquots[type] = NULL (2)\n  spin_lock(&dquots[cnt]->dq_dqb_lock) (3)\n   ....\n\nIf dquot_free_inode(or other routines) checks inode's quota pointers (1)\nbefore quota_off sets it to NULL(2) and use it (3) after that, NULL pointer\ndereference will be triggered.\n\nSo let's fix it by using a temporary pointer to avoid this issue.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26878",
               url: "https://www.suse.com/security/cve/CVE-2024-26878",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223060 for CVE-2024-26878",
               url: "https://bugzilla.suse.com/1223060",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26878",
      },
      {
         cve: "CVE-2024-26883",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26883",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stackmap overflow check on 32-bit arches\n\nThe stackmap code relies on roundup_pow_of_two() to compute the number\nof hash buckets, and contains an overflow check by checking if the\nresulting value is 0. However, on 32-bit arches, the roundup code itself\ncan overflow by doing a 32-bit left-shift of an unsigned long value,\nwhich is undefined behaviour, so it is not guaranteed to truncate\nneatly. This was triggered by syzbot on the DEVMAP_HASH type, which\ncontains the same check, copied from the hashtab code.\n\nThe commit in the fixes tag actually attempted to fix this, but the fix\ndid not account for the UB, so the fix only works on CPUs where an\noverflow does result in a neat truncation to zero, which is not\nguaranteed. Checking the value before rounding does not have this\nproblem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26883",
               url: "https://www.suse.com/security/cve/CVE-2024-26883",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223035 for CVE-2024-26883",
               url: "https://bugzilla.suse.com/1223035",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26883",
      },
      {
         cve: "CVE-2024-26884",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26884",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix hashtab overflow check on 32-bit arches\n\nThe hashtab code relies on roundup_pow_of_two() to compute the number of\nhash buckets, and contains an overflow check by checking if the\nresulting value is 0. However, on 32-bit arches, the roundup code itself\ncan overflow by doing a 32-bit left-shift of an unsigned long value,\nwhich is undefined behaviour, so it is not guaranteed to truncate\nneatly. This was triggered by syzbot on the DEVMAP_HASH type, which\ncontains the same check, copied from the hashtab code. So apply the same\nfix to hashtab, by moving the overflow check to before the roundup.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26884",
               url: "https://www.suse.com/security/cve/CVE-2024-26884",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223189 for CVE-2024-26884",
               url: "https://bugzilla.suse.com/1223189",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26884",
      },
      {
         cve: "CVE-2024-26898",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26898",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\naoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\n\nThis patch is against CVE-2023-6270. The description of cve is:\n\n  A flaw was found in the ATA over Ethernet (AoE) driver in the Linux\n  kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on\n  `struct net_device`, and a use-after-free can be triggered by racing\n  between the free on the struct and the access through the `skbtxq`\n  global queue. This could lead to a denial of service condition or\n  potential code execution.\n\nIn aoecmd_cfg_pkts(), it always calls dev_put(ifp) when skb initial\ncode is finished. But the net_device ifp will still be used in\nlater tx()->dev_queue_xmit() in kthread. Which means that the\ndev_put(ifp) should NOT be called in the success path of skb\ninitial code in aoecmd_cfg_pkts(). Otherwise tx() may run into\nuse-after-free because the net_device is freed.\n\nThis patch removed the dev_put(ifp) in the success path in\naoecmd_cfg_pkts(), and added dev_put() after skb xmit in tx().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26898",
               url: "https://www.suse.com/security/cve/CVE-2024-26898",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218562 for CVE-2024-26898",
               url: "https://bugzilla.suse.com/1218562",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223016 for CVE-2024-26898",
               url: "https://bugzilla.suse.com/1223016",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223017 for CVE-2024-26898",
               url: "https://bugzilla.suse.com/1223017",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26898",
      },
      {
         cve: "CVE-2024-26901",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26901",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndo_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak\n\nsyzbot identified a kernel information leak vulnerability in\ndo_sys_name_to_handle() and issued the following report [1].\n\n[1]\n\"BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline]\nBUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x100 lib/usercopy.c:40\n instrument_copy_to_user include/linux/instrumented.h:114 [inline]\n _copy_to_user+0xbc/0x100 lib/usercopy.c:40\n copy_to_user include/linux/uaccess.h:191 [inline]\n do_sys_name_to_handle fs/fhandle.c:73 [inline]\n __do_sys_name_to_handle_at fs/fhandle.c:112 [inline]\n __se_sys_name_to_handle_at+0x949/0xb10 fs/fhandle.c:94\n __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94\n ...\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517\n __do_kmalloc_node mm/slab_common.c:1006 [inline]\n __kmalloc+0x121/0x3c0 mm/slab_common.c:1020\n kmalloc include/linux/slab.h:604 [inline]\n do_sys_name_to_handle fs/fhandle.c:39 [inline]\n __do_sys_name_to_handle_at fs/fhandle.c:112 [inline]\n __se_sys_name_to_handle_at+0x441/0xb10 fs/fhandle.c:94\n __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94\n ...\n\nBytes 18-19 of 20 are uninitialized\nMemory access of size 20 starts at ffff888128a46380\nData copied to user address 0000000020000240\"\n\nPer Chuck Lever's suggestion, use kzalloc() instead of kmalloc() to\nsolve the problem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26901",
               url: "https://www.suse.com/security/cve/CVE-2024-26901",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223198 for CVE-2024-26901",
               url: "https://bugzilla.suse.com/1223198",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2024-26901",
      },
      {
         cve: "CVE-2024-26903",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26903",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security\n\nDuring our fuzz testing of the connection and disconnection process at the\nRFCOMM layer, we discovered this bug. By comparing the packets from a\nnormal connection and disconnection process with the testcase that\ntriggered a KASAN report. We analyzed the cause of this bug as follows:\n\n1. In the packets captured during a normal connection, the host sends a\n`Read Encryption Key Size` type of `HCI_CMD` packet\n(Command Opcode: 0x1408) to the controller to inquire the length of\nencryption key.After receiving this packet, the controller immediately\nreplies with a Command Completepacket (Event Code: 0x0e) to return the\nEncryption Key Size.\n\n2. In our fuzz test case, the timing of the controller's response to this\npacket was delayed to an unexpected point: after the RFCOMM and L2CAP\nlayers had disconnected but before the HCI layer had disconnected.\n\n3. After receiving the Encryption Key Size Response at the time described\nin point 2, the host still called the rfcomm_check_security function.\nHowever, by this time `struct l2cap_conn *conn = l2cap_pi(sk)->chan->conn;`\nhad already been released, and when the function executed\n`return hci_conn_security(conn->hcon, d->sec_level, auth_type, d->out);`,\nspecifically when accessing `conn->hcon`, a null-ptr-deref error occurred.\n\nTo fix this bug, check if `sk->sk_state` is BT_CLOSED before calling\nrfcomm_recv_frame in rfcomm_process_rx.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26903",
               url: "https://www.suse.com/security/cve/CVE-2024-26903",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223187 for CVE-2024-26903",
               url: "https://bugzilla.suse.com/1223187",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26903",
      },
      {
         cve: "CVE-2024-26907",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26907",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Fix fortify source warning while accessing Eth segment\n\n ------------[ cut here ]------------\n memcpy: detected field-spanning write (size 56) of single field \"eseg->inline_hdr.start\" at /var/lib/dkms/mlnx-ofed-kernel/5.8/build/drivers/infiniband/hw/mlx5/wr.c:131 (size 2)\n WARNING: CPU: 0 PID: 293779 at /var/lib/dkms/mlnx-ofed-kernel/5.8/build/drivers/infiniband/hw/mlx5/wr.c:131 mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib]\n Modules linked in: 8021q garp mrp stp llc rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) ib_uverbs(OE) ib_core(OE) mlx5_core(OE) pci_hyperv_intf mlxdevm(OE) mlx_compat(OE) tls mlxfw(OE) psample nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables libcrc32c nfnetlink mst_pciconf(OE) knem(OE) vfio_pci vfio_pci_core vfio_iommu_type1 vfio iommufd irqbypass cuse nfsv3 nfs fscache netfs xfrm_user xfrm_algo ipmi_devintf ipmi_msghandler binfmt_misc crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 snd_pcsp aesni_intel crypto_simd cryptd snd_pcm snd_timer joydev snd soundcore input_leds serio_raw evbug nfsd auth_rpcgss nfs_acl lockd grace sch_fq_codel sunrpc drm efi_pstore ip_tables x_tables autofs4 psmouse virtio_net net_failover failover floppy\n  [last unloaded: mlx_compat(OE)]\n CPU: 0 PID: 293779 Comm: ssh Tainted: G           OE      6.2.0-32-generic #32~22.04.1-Ubuntu\n Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011\n RIP: 0010:mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib]\n Code: 0c 01 00 a8 01 75 25 48 8b 75 a0 b9 02 00 00 00 48 c7 c2 10 5b fd c0 48 c7 c7 80 5b fd c0 c6 05 57 0c 03 00 01 e8 95 4d 93 da <0f> 0b 44 8b 4d b0 4c 8b 45 c8 48 8b 4d c0 e9 49 fb ff ff 41 0f b7\n RSP: 0018:ffffb5b48478b570 EFLAGS: 00010046\n RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000\n RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n RBP: ffffb5b48478b628 R08: 0000000000000000 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000000 R12: ffffb5b48478b5e8\n R13: ffff963a3c609b5e R14: ffff9639c3fbd800 R15: ffffb5b480475a80\n FS:  00007fc03b444c80(0000) GS:ffff963a3dc00000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000556f46bdf000 CR3: 0000000006ac6003 CR4: 00000000003706f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n  <TASK>\n  ? show_regs+0x72/0x90\n  ? mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib]\n  ? __warn+0x8d/0x160\n  ? mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib]\n  ? report_bug+0x1bb/0x1d0\n  ? handle_bug+0x46/0x90\n  ? exc_invalid_op+0x19/0x80\n  ? asm_exc_invalid_op+0x1b/0x20\n  ? mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib]\n  mlx5_ib_post_send_nodrain+0xb/0x20 [mlx5_ib]\n  ipoib_send+0x2ec/0x770 [ib_ipoib]\n  ipoib_start_xmit+0x5a0/0x770 [ib_ipoib]\n  dev_hard_start_xmit+0x8e/0x1e0\n  ? validate_xmit_skb_list+0x4d/0x80\n  sch_direct_xmit+0x116/0x3a0\n  __dev_xmit_skb+0x1fd/0x580\n  __dev_queue_xmit+0x284/0x6b0\n  ? _raw_spin_unlock_irq+0xe/0x50\n  ? __flush_work.isra.0+0x20d/0x370\n  ? push_pseudo_header+0x17/0x40 [ib_ipoib]\n  neigh_connected_output+0xcd/0x110\n  ip_finish_output2+0x179/0x480\n  ? __smp_call_single_queue+0x61/0xa0\n  __ip_finish_output+0xc3/0x190\n  ip_finish_output+0x2e/0xf0\n  ip_output+0x78/0x110\n  ? __pfx_ip_finish_output+0x10/0x10\n  ip_local_out+0x64/0x70\n  __ip_queue_xmit+0x18a/0x460\n  ip_queue_xmit+0x15/0x30\n  __tcp_transmit_skb+0x914/0x9c0\n  tcp_write_xmit+0x334/0x8d0\n  tcp_push_one+0x3c/0x60\n  tcp_sendmsg_locked+0x2e1/0xac0\n  tcp_sendmsg+0x2d/0x50\n  inet_sendmsg+0x43/0x90\n  sock_sendmsg+0x68/0x80\n  sock_write_iter+0x93/0x100\n  vfs_write+0x326/0x3c0\n  ksys_write+0xbd/0xf0\n  ? do_syscall_64+0x69/0x90\n  __x64_sys_write+0x19/0x30\n  do_syscall_\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26907",
               url: "https://www.suse.com/security/cve/CVE-2024-26907",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223203 for CVE-2024-26907",
               url: "https://bugzilla.suse.com/1223203",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 0,
                  baseSeverity: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "low",
            },
         ],
         title: "CVE-2024-26907",
      },
      {
         cve: "CVE-2024-26922",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26922",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: validate the parameters of bo mapping operations more clearly\n\nVerify the parameters of\namdgpu_vm_bo_(map/replace_map/clearing_mappings) in one common place.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26922",
               url: "https://www.suse.com/security/cve/CVE-2024-26922",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223315 for CVE-2024-26922",
               url: "https://bugzilla.suse.com/1223315",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26922",
      },
      {
         cve: "CVE-2024-26929",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26929",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26929",
               url: "https://www.suse.com/security/cve/CVE-2024-26929",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223715 for CVE-2024-26929",
               url: "https://bugzilla.suse.com/1223715",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223716 for CVE-2024-26929",
               url: "https://bugzilla.suse.com/1223716",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2024-26929",
      },
      {
         cve: "CVE-2024-26930",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26930",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix double free of the ha->vp_map pointer\n\nCoverity scan reported potential risk of double free of the pointer\nha->vp_map.  ha->vp_map was freed in qla2x00_mem_alloc(), and again freed\nin function qla2x00_mem_free(ha).\n\nAssign NULL to vp_map and kfree take care of NULL.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26930",
               url: "https://www.suse.com/security/cve/CVE-2024-26930",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223626 for CVE-2024-26930",
               url: "https://bugzilla.suse.com/1223626",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223681 for CVE-2024-26930",
               url: "https://bugzilla.suse.com/1223681",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2024-26930",
      },
      {
         cve: "CVE-2024-26931",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26931",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix command flush on cable pull\n\nSystem crash due to command failed to flush back to SCSI layer.\n\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000000\n PGD 0 P4D 0\n Oops: 0000 [#1] SMP NOPTI\n CPU: 27 PID: 793455 Comm: kworker/u130:6 Kdump: loaded Tainted: G           OE    --------- -  - 4.18.0-372.9.1.el8.x86_64 #1\n Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 09/03/2021\n Workqueue: nvme-wq nvme_fc_connect_ctrl_work [nvme_fc]\n RIP: 0010:__wake_up_common+0x4c/0x190\n Code: 24 10 4d 85 c9 74 0a 41 f6 01 04 0f 85 9d 00 00 00 48 8b 43 08 48 83 c3 08 4c 8d 48 e8 49 8d 41 18 48 39 c3 0f 84 f0 00 00 00 <49> 8b 41 18 89 54 24 08 31 ed 4c 8d 70 e8 45 8b 29 41 f6 c5 04 75\n RSP: 0018:ffff95f3e0cb7cd0 EFLAGS: 00010086\n RAX: 0000000000000000 RBX: ffff8b08d3b26328 RCX: 0000000000000000\n RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8b08d3b26320\n RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffe8\n R10: 0000000000000000 R11: ffff95f3e0cb7a60 R12: ffff95f3e0cb7d20\n R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000\n FS:  0000000000000000(0000) GS:ffff8b2fdf6c0000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000000 CR3: 0000002f1e410002 CR4: 00000000007706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n  __wake_up_common_lock+0x7c/0xc0\n  qla_nvme_ls_req+0x355/0x4c0 [qla2xxx]\n qla2xxx [0000:12:00.1]-f084:3: qlt_free_session_done: se_sess 0000000000000000 / sess ffff8ae1407ca000 from port 21:32:00:02:ac:07:ee:b8 loop_id 0x02 s_id 01:02:00 logout 1 keep 0 els_logo 0\n ? __nvme_fc_send_ls_req+0x260/0x380 [nvme_fc]\n qla2xxx [0000:12:00.1]-207d:3: FCPort 21:32:00:02:ac:07:ee:b8 state transitioned from ONLINE to LOST - portid=010200.\n  ? nvme_fc_send_ls_req.constprop.42+0x1a/0x45 [nvme_fc]\n qla2xxx [0000:12:00.1]-2109:3: qla2x00_schedule_rport_del 21320002ac07eeb8. rport ffff8ae598122000 roles 1\n ? nvme_fc_connect_ctrl_work.cold.63+0x1e3/0xa7d [nvme_fc]\n qla2xxx [0000:12:00.1]-f084:3: qlt_free_session_done: se_sess 0000000000000000 / sess ffff8ae14801e000 from port 21:32:01:02:ad:f7:ee:b8 loop_id 0x04 s_id 01:02:01 logout 1 keep 0 els_logo 0\n  ? __switch_to+0x10c/0x450\n ? process_one_work+0x1a7/0x360\n qla2xxx [0000:12:00.1]-207d:3: FCPort 21:32:01:02:ad:f7:ee:b8 state transitioned from ONLINE to LOST - portid=010201.\n  ? worker_thread+0x1ce/0x390\n  ? create_worker+0x1a0/0x1a0\n qla2xxx [0000:12:00.1]-2109:3: qla2x00_schedule_rport_del 21320102adf7eeb8. rport ffff8ae3b2312800 roles 70\n  ? kthread+0x10a/0x120\n qla2xxx [0000:12:00.1]-2112:3: qla_nvme_unregister_remote_port: unregister remoteport on ffff8ae14801e000 21320102adf7eeb8\n  ? set_kthread_struct+0x40/0x40\n qla2xxx [0000:12:00.1]-2110:3: remoteport_delete of ffff8ae14801e000 21320102adf7eeb8 completed.\n  ? ret_from_fork+0x1f/0x40\n qla2xxx [0000:12:00.1]-f086:3: qlt_free_session_done: waiting for sess ffff8ae14801e000 logout\n\nThe system was under memory stress where driver was not able to allocate an\nSRB to carry out error recovery of cable pull.  The failure to flush causes\nupper layer to start modifying scsi_cmnd.  When the system frees up some\nmemory, the subsequent cable pull trigger another command flush. At this\npoint the driver access a null pointer when attempting to DMA unmap the\nSGL.\n\nAdd a check to make sure commands are flush back on session tear down to\nprevent the null pointer access.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26931",
               url: "https://www.suse.com/security/cve/CVE-2024-26931",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223627 for CVE-2024-26931",
               url: "https://bugzilla.suse.com/1223627",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26931",
      },
      {
         cve: "CVE-2024-26948",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26948",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add a dc_state NULL check in dc_state_release\n\n[How]\nCheck wheather state is NULL before releasing it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26948",
               url: "https://www.suse.com/security/cve/CVE-2024-26948",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223664 for CVE-2024-26948",
               url: "https://bugzilla.suse.com/1223664",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26948",
      },
      {
         cve: "CVE-2024-26993",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26993",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: sysfs: Fix reference leak in sysfs_break_active_protection()\n\nThe sysfs_break_active_protection() routine has an obvious reference\nleak in its error path.  If the call to kernfs_find_and_get() fails then\nkn will be NULL, so the companion sysfs_unbreak_active_protection()\nroutine won't get called (and would only cause an access violation by\ntrying to dereference kn->parent if it was called).  As a result, the\nreference to kobj acquired at the start of the function will never be\nreleased.\n\nFix the leak by adding an explicit kobject_put() call when kn is NULL.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26993",
               url: "https://www.suse.com/security/cve/CVE-2024-26993",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223693 for CVE-2024-26993",
               url: "https://bugzilla.suse.com/1223693",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26993",
      },
      {
         cve: "CVE-2024-27013",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27013",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntun: limit printing rate when illegal packet received by tun dev\n\nvhost_worker will call tun call backs to receive packets. If too many\nillegal packets arrives, tun_do_read will keep dumping packet contents.\nWhen console is enabled, it will costs much more cpu time to dump\npacket and soft lockup will be detected.\n\nnet_ratelimit mechanism can be used to limit the dumping rate.\n\nPID: 33036    TASK: ffff949da6f20000  CPU: 23   COMMAND: \"vhost-32980\"\n #0 [fffffe00003fce50] crash_nmi_callback at ffffffff89249253\n #1 [fffffe00003fce58] nmi_handle at ffffffff89225fa3\n #2 [fffffe00003fceb0] default_do_nmi at ffffffff8922642e\n #3 [fffffe00003fced0] do_nmi at ffffffff8922660d\n #4 [fffffe00003fcef0] end_repeat_nmi at ffffffff89c01663\n    [exception RIP: io_serial_in+20]\n    RIP: ffffffff89792594  RSP: ffffa655314979e8  RFLAGS: 00000002\n    RAX: ffffffff89792500  RBX: ffffffff8af428a0  RCX: 0000000000000000\n    RDX: 00000000000003fd  RSI: 0000000000000005  RDI: ffffffff8af428a0\n    RBP: 0000000000002710   R8: 0000000000000004   R9: 000000000000000f\n    R10: 0000000000000000  R11: ffffffff8acbf64f  R12: 0000000000000020\n    R13: ffffffff8acbf698  R14: 0000000000000058  R15: 0000000000000000\n    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018\n #5 [ffffa655314979e8] io_serial_in at ffffffff89792594\n #6 [ffffa655314979e8] wait_for_xmitr at ffffffff89793470\n #7 [ffffa65531497a08] serial8250_console_putchar at ffffffff897934f6\n #8 [ffffa65531497a20] uart_console_write at ffffffff8978b605\n #9 [ffffa65531497a48] serial8250_console_write at ffffffff89796558\n #10 [ffffa65531497ac8] console_unlock at ffffffff89316124\n #11 [ffffa65531497b10] vprintk_emit at ffffffff89317c07\n #12 [ffffa65531497b68] printk at ffffffff89318306\n #13 [ffffa65531497bc8] print_hex_dump at ffffffff89650765\n #14 [ffffa65531497ca8] tun_do_read at ffffffffc0b06c27 [tun]\n #15 [ffffa65531497d38] tun_recvmsg at ffffffffc0b06e34 [tun]\n #16 [ffffa65531497d68] handle_rx at ffffffffc0c5d682 [vhost_net]\n #17 [ffffa65531497ed0] vhost_worker at ffffffffc0c644dc [vhost]\n #18 [ffffa65531497f10] kthread at ffffffff892d2e72\n #19 [ffffa65531497f50] ret_from_fork at ffffffff89c0022f",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27013",
               url: "https://www.suse.com/security/cve/CVE-2024-27013",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223745 for CVE-2024-27013",
               url: "https://bugzilla.suse.com/1223745",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27013",
      },
      {
         cve: "CVE-2024-27014",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27014",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent deadlock while disabling aRFS\n\nWhen disabling aRFS under the `priv->state_lock`, any scheduled\naRFS works are canceled using the `cancel_work_sync` function,\nwhich waits for the work to end if it has already started.\nHowever, while waiting for the work handler, the handler will\ntry to acquire the `state_lock` which is already acquired.\n\nThe worker acquires the lock to delete the rules if the state\nis down, which is not the worker's responsibility since\ndisabling aRFS deletes the rules.\n\nAdd an aRFS state variable, which indicates whether the aRFS is\nenabled and prevent adding rules when the aRFS is disabled.\n\nKernel log:\n\n======================================================\nWARNING: possible circular locking dependency detected\n6.7.0-rc4_net_next_mlx5_5483eb2 #1 Tainted: G          I\n------------------------------------------------------\nethtool/386089 is trying to acquire lock:\nffff88810f21ce68 ((work_completion)(&rule->arfs_work)){+.+.}-{0:0}, at: __flush_work+0x74/0x4e0\n\nbut task is already holding lock:\nffff8884a1808cc0 (&priv->state_lock){+.+.}-{3:3}, at: mlx5e_ethtool_set_channels+0x53/0x200 [mlx5_core]\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-> #1 (&priv->state_lock){+.+.}-{3:3}:\n       __mutex_lock+0x80/0xc90\n       arfs_handle_work+0x4b/0x3b0 [mlx5_core]\n       process_one_work+0x1dc/0x4a0\n       worker_thread+0x1bf/0x3c0\n       kthread+0xd7/0x100\n       ret_from_fork+0x2d/0x50\n       ret_from_fork_asm+0x11/0x20\n\n-> #0 ((work_completion)(&rule->arfs_work)){+.+.}-{0:0}:\n       __lock_acquire+0x17b4/0x2c80\n       lock_acquire+0xd0/0x2b0\n       __flush_work+0x7a/0x4e0\n       __cancel_work_timer+0x131/0x1c0\n       arfs_del_rules+0x143/0x1e0 [mlx5_core]\n       mlx5e_arfs_disable+0x1b/0x30 [mlx5_core]\n       mlx5e_ethtool_set_channels+0xcb/0x200 [mlx5_core]\n       ethnl_set_channels+0x28f/0x3b0\n       ethnl_default_set_doit+0xec/0x240\n       genl_family_rcv_msg_doit+0xd0/0x120\n       genl_rcv_msg+0x188/0x2c0\n       netlink_rcv_skb+0x54/0x100\n       genl_rcv+0x24/0x40\n       netlink_unicast+0x1a1/0x270\n       netlink_sendmsg+0x214/0x460\n       __sock_sendmsg+0x38/0x60\n       __sys_sendto+0x113/0x170\n       __x64_sys_sendto+0x20/0x30\n       do_syscall_64+0x40/0xe0\n       entry_SYSCALL_64_after_hwframe+0x46/0x4e\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n       CPU0                    CPU1\n       ----                    ----\n  lock(&priv->state_lock);\n                               lock((work_completion)(&rule->arfs_work));\n                               lock(&priv->state_lock);\n  lock((work_completion)(&rule->arfs_work));\n\n *** DEADLOCK ***\n\n3 locks held by ethtool/386089:\n #0: ffffffff82ea7210 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40\n #1: ffffffff82e94c88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_set_doit+0xd3/0x240\n #2: ffff8884a1808cc0 (&priv->state_lock){+.+.}-{3:3}, at: mlx5e_ethtool_set_channels+0x53/0x200 [mlx5_core]\n\nstack backtrace:\nCPU: 15 PID: 386089 Comm: ethtool Tainted: G          I        6.7.0-rc4_net_next_mlx5_5483eb2 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nCall Trace:\n <TASK>\n dump_stack_lvl+0x60/0xa0\n check_noncircular+0x144/0x160\n __lock_acquire+0x17b4/0x2c80\n lock_acquire+0xd0/0x2b0\n ? __flush_work+0x74/0x4e0\n ? save_trace+0x3e/0x360\n ? __flush_work+0x74/0x4e0\n __flush_work+0x7a/0x4e0\n ? __flush_work+0x74/0x4e0\n ? __lock_acquire+0xa78/0x2c80\n ? lock_acquire+0xd0/0x2b0\n ? mark_held_locks+0x49/0x70\n __cancel_work_timer+0x131/0x1c0\n ? mark_held_locks+0x49/0x70\n arfs_del_rules+0x143/0x1e0 [mlx5_core]\n mlx5e_arfs_disable+0x1b/0x30 [mlx5_core]\n mlx5e_ethtool_set_channels+0xcb/0x200 [mlx5_core]\n ethnl_set_channels+0x28f/0x3b0\n ethnl_default_set_doit+0xec/0x240\n genl_family_rcv_msg_doit+0xd0/0x120\n genl_rcv_msg+0x188/0x2c0\n ? ethn\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27014",
               url: "https://www.suse.com/security/cve/CVE-2024-27014",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223735 for CVE-2024-27014",
               url: "https://bugzilla.suse.com/1223735",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27014",
      },
      {
         cve: "CVE-2024-27043",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27043",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: edia: dvbdev: fix a use-after-free\n\nIn dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed\nin several error-handling paths. However, *pdvbdev is not set to NULL\nafter dvbdev's deallocation, causing use-after-frees in many places,\nfor example, in the following call chain:\n\nbudget_register\n  |-> dvb_dmxdev_init\n        |-> dvb_register_device\n  |-> dvb_dmxdev_release\n        |-> dvb_unregister_device\n              |-> dvb_remove_device\n                    |-> dvb_device_put\n                          |-> kref_put\n\nWhen calling dvb_unregister_device, dmxdev->dvbdev (i.e. *pdvbdev in\ndvb_register_device) could point to memory that had been freed in\ndvb_register_device. Thereafter, this pointer is transferred to\nkref_put and triggering a use-after-free.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27043",
               url: "https://www.suse.com/security/cve/CVE-2024-27043",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218562 for CVE-2024-27043",
               url: "https://bugzilla.suse.com/1218562",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223824 for CVE-2024-27043",
               url: "https://bugzilla.suse.com/1223824",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223825 for CVE-2024-27043",
               url: "https://bugzilla.suse.com/1223825",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "important",
            },
         ],
         title: "CVE-2024-27043",
      },
      {
         cve: "CVE-2024-27046",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27046",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnfp: flower: handle acti_netdevs allocation failure\n\nThe kmalloc_array() in nfp_fl_lag_do_work() will return null, if\nthe physical memory has run out. As a result, if we dereference\nthe acti_netdevs, the null pointer dereference bugs will happen.\n\nThis patch adds a check to judge whether allocation failure occurs.\nIf it happens, the delayed work will be rescheduled and try again.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27046",
               url: "https://www.suse.com/security/cve/CVE-2024-27046",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223827 for CVE-2024-27046",
               url: "https://bugzilla.suse.com/1223827",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27046",
      },
      {
         cve: "CVE-2024-27054",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27054",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: fix double module refcount decrement\n\nOnce the discipline is associated with the device, deleting the device\ntakes care of decrementing the module's refcount.  Doing it manually on\nthis error path causes refcount to artificially decrease on each error\nwhile it should just stay the same.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27054",
               url: "https://www.suse.com/security/cve/CVE-2024-27054",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223819 for CVE-2024-27054",
               url: "https://bugzilla.suse.com/1223819",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27054",
      },
      {
         cve: "CVE-2024-27072",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27072",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: usbtv: Remove useless locks in usbtv_video_free()\n\nRemove locks calls in usbtv_video_free() because\nare useless and may led to a deadlock as reported here:\nhttps://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000\nAlso remove usbtv_stop() call since it will be called when\nunregistering the device.\n\nBefore 'c838530d230b' this issue would only be noticed if you\ndisconnect while streaming and now it is noticeable even when\ndisconnecting while not streaming.\n\n\n[hverkuil: fix minor spelling mistake in log message]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27072",
               url: "https://www.suse.com/security/cve/CVE-2024-27072",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223837 for CVE-2024-27072",
               url: "https://bugzilla.suse.com/1223837",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27072",
      },
      {
         cve: "CVE-2024-27073",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27073",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ttpci: fix two memleaks in budget_av_attach\n\nWhen saa7146_register_device and saa7146_vv_init fails, budget_av_attach\nshould free the resources it allocates, like the error-handling of\nttpci_budget_init does. Besides, there are two fixme comment refers to\nsuch deallocations.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27073",
               url: "https://www.suse.com/security/cve/CVE-2024-27073",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223843 for CVE-2024-27073",
               url: "https://bugzilla.suse.com/1223843",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27073",
      },
      {
         cve: "CVE-2024-27074",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27074",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: go7007: fix a memleak in go7007_load_encoder\n\nIn go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without\na deallocation thereafter. After the following call chain:\n\nsaa7134_go7007_init\n  |-> go7007_boot_encoder\n        |-> go7007_load_encoder\n  |-> kfree(go)\n\ngo is freed and thus bounce is leaked.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27074",
               url: "https://www.suse.com/security/cve/CVE-2024-27074",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223844 for CVE-2024-27074",
               url: "https://bugzilla.suse.com/1223844",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27074",
      },
      {
         cve: "CVE-2024-27075",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27075",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: avoid stack overflow warnings with clang\n\nA previous patch worked around a KASAN issue in stv0367, now a similar\nproblem showed up with clang:\n\ndrivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than]\n 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe)\n\nRework the stv0367_writereg() function to be simpler and mark both\nregister access functions as noinline_for_stack so the temporary\ni2c_msg structures do not get duplicated on the stack when KASAN_STACK\nis enabled.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27075",
               url: "https://www.suse.com/security/cve/CVE-2024-27075",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223842 for CVE-2024-27075",
               url: "https://bugzilla.suse.com/1223842",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27075",
      },
      {
         cve: "CVE-2024-27078",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27078",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-tpg: fix some memleaks in tpg_alloc\n\nIn tpg_alloc, resources should be deallocated in each and every\nerror-handling paths, since they are allocated in for statements.\nOtherwise there would be memleaks because tpg_free is called only when\ntpg_alloc return 0.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27078",
               url: "https://www.suse.com/security/cve/CVE-2024-27078",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223781 for CVE-2024-27078",
               url: "https://bugzilla.suse.com/1223781",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27078",
      },
      {
         cve: "CVE-2024-27388",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-27388",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: fix some memleaks in gssx_dec_option_array\n\nThe creds and oa->data need to be freed in the error-handling paths after\ntheir allocation. So this patch add these deallocations in the\ncorresponding paths.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-27388",
               url: "https://www.suse.com/security/cve/CVE-2024-27388",
            },
            {
               category: "external",
               summary: "SUSE Bug 1223744 for CVE-2024-27388",
               url: "https://bugzilla.suse.com/1223744",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.182.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.182.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.182.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-14T14:30:34Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-27388",
      },
   ],
}