RHSA-2021:4356
Vulnerability from csaf_opensuse - Published: 2021-11-09 00:00 - Updated: 2026-09-20 11:17Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2021:4356.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2021:4356.
Patchnames: RHSA-2021:4356
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.2 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
low
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
4.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
5.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
5.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
low
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
8.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
8.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
8.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
8.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
4.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-14615
Threats
Impact
moderate
References
218 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2021:4356.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2021:4356.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2021:4356",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2021_4356.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14615 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15794 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0427 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24502 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24503 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24504 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24586 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24586/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24587 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24588 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26139 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26140 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26143 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26144 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26145 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26147 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27777 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-29368 page",
"url": "https://www.suse.com/security/cve/CVE-2020-29368/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-29660 page",
"url": "https://www.suse.com/security/cve/CVE-2020-29660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-36158 page",
"url": "https://www.suse.com/security/cve/CVE-2020-36158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-36312 page",
"url": "https://www.suse.com/security/cve/CVE-2020-36312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-36386 page",
"url": "https://www.suse.com/security/cve/CVE-2020-36386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0129 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-20194 page",
"url": "https://www.suse.com/security/cve/CVE-2021-20194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-20239 page",
"url": "https://www.suse.com/security/cve/CVE-2021-20239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23133 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28950 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28971 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29155 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29646 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29650 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29657 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-31440 page",
"url": "https://www.suse.com/security/cve/CVE-2021-31440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-31829 page",
"url": "https://www.suse.com/security/cve/CVE-2021-31829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-31916 page",
"url": "https://www.suse.com/security/cve/CVE-2021-31916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-33033 page",
"url": "https://www.suse.com/security/cve/CVE-2021-33033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-33098 page",
"url": "https://www.suse.com/security/cve/CVE-2021-33098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-33200 page",
"url": "https://www.suse.com/security/cve/CVE-2021-33200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3348 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3444 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3489 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3564 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3573 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3600 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3635 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3659 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3679 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3732 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4442 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46905 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46983 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47011 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47080 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-20166 page",
"url": "https://www.suse.com/security/cve/CVE-2022-20166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50042 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50073 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53578 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53598 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53607 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53607/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:17:39Z",
"generator": {
"date": "2021-11-09T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2021:4356",
"initial_release_date": "2021-11-09T00:00:00Z",
"revision_history": [
{
"date": "2021-11-09T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:17:39Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-348.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-348.el8.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-348.el8.noarch",
"product_id": "kernel-doc-0:4.18.0-348.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-348.el8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-348.el8.x86_64",
"product": {
"name": "bpftool-0:4.18.0-348.el8.x86_64",
"product_id": "bpftool-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-348.el8?arch=x86_64\u0026upstream=bpftool-0:4.18.0-348.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-core-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-debug-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-348.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-348.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-348.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-348.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-devel-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-348.el8?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-348.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-headers-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-modules-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-tools-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-348.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-348.el8.x86_64",
"product": {
"name": "perf-0:4.18.0-348.el8.x86_64",
"product_id": "perf-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-348.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-348.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-348.el8.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-348.el8.x86_64",
"product_id": "python3-perf-0:4.18.0-348.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-348.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-348.el8.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64"
},
"product_reference": "bpftool-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-348.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-348.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-348.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64"
},
"product_reference": "perf-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-348.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-348.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14615"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14615",
"url": "https://www.suse.com/security/cve/CVE-2019-14615"
},
{
"category": "external",
"summary": "SUSE Bug 1160195 for CVE-2019-14615",
"url": "https://bugzilla.suse.com/1160195"
},
{
"category": "external",
"summary": "SUSE Bug 1165881 for CVE-2019-14615",
"url": "https://bugzilla.suse.com/1165881"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-14615"
},
{
"cve": "CVE-2019-15794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15794"
}
],
"notes": [
{
"category": "general",
"text": "Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma-\u003evm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15794",
"url": "https://www.suse.com/security/cve/CVE-2019-15794"
},
{
"category": "external",
"summary": "SUSE Bug 1158156 for CVE-2019-15794",
"url": "https://bugzilla.suse.com/1158156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15794"
},
{
"cve": "CVE-2020-0427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0427"
}
],
"notes": [
{
"category": "general",
"text": "In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0427",
"url": "https://www.suse.com/security/cve/CVE-2020-0427"
},
{
"category": "external",
"summary": "SUSE Bug 1176725 for CVE-2020-0427",
"url": "https://bugzilla.suse.com/1176725"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-0427"
},
{
"cve": "CVE-2020-24502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24502"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24502",
"url": "https://www.suse.com/security/cve/CVE-2020-24502"
},
{
"category": "external",
"summary": "SUSE Bug 1182409 for CVE-2020-24502",
"url": "https://bugzilla.suse.com/1182409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-24502"
},
{
"cve": "CVE-2020-24503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24503"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24503",
"url": "https://www.suse.com/security/cve/CVE-2020-24503"
},
{
"category": "external",
"summary": "SUSE Bug 1182405 for CVE-2020-24503",
"url": "https://bugzilla.suse.com/1182405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-24503"
},
{
"cve": "CVE-2020-24504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24504"
}
],
"notes": [
{
"category": "general",
"text": "Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24504",
"url": "https://www.suse.com/security/cve/CVE-2020-24504"
},
{
"category": "external",
"summary": "SUSE Bug 1182404 for CVE-2020-24504",
"url": "https://bugzilla.suse.com/1182404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24504"
},
{
"cve": "CVE-2020-24586",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24586"
}
],
"notes": [
{
"category": "general",
"text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24586",
"url": "https://www.suse.com/security/cve/CVE-2020-24586"
},
{
"category": "external",
"summary": "SUSE Bug 1185859 for CVE-2020-24586",
"url": "https://bugzilla.suse.com/1185859"
},
{
"category": "external",
"summary": "SUSE Bug 1192868 for CVE-2020-24586",
"url": "https://bugzilla.suse.com/1192868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24586"
},
{
"cve": "CVE-2020-24587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24587"
}
],
"notes": [
{
"category": "general",
"text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24587",
"url": "https://www.suse.com/security/cve/CVE-2020-24587"
},
{
"category": "external",
"summary": "SUSE Bug 1185859 for CVE-2020-24587",
"url": "https://bugzilla.suse.com/1185859"
},
{
"category": "external",
"summary": "SUSE Bug 1185862 for CVE-2020-24587",
"url": "https://bugzilla.suse.com/1185862"
},
{
"category": "external",
"summary": "SUSE Bug 1192868 for CVE-2020-24587",
"url": "https://bugzilla.suse.com/1192868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24587"
},
{
"cve": "CVE-2020-24588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24588"
}
],
"notes": [
{
"category": "general",
"text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24588",
"url": "https://www.suse.com/security/cve/CVE-2020-24588"
},
{
"category": "external",
"summary": "SUSE Bug 1185861 for CVE-2020-24588",
"url": "https://bugzilla.suse.com/1185861"
},
{
"category": "external",
"summary": "SUSE Bug 1192868 for CVE-2020-24588",
"url": "https://bugzilla.suse.com/1192868"
},
{
"category": "external",
"summary": "SUSE Bug 1199701 for CVE-2020-24588",
"url": "https://bugzilla.suse.com/1199701"
},
{
"category": "external",
"summary": "SUSE Bug 1248178 for CVE-2020-24588",
"url": "https://bugzilla.suse.com/1248178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24588"
},
{
"cve": "CVE-2020-26139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26139"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26139",
"url": "https://www.suse.com/security/cve/CVE-2020-26139"
},
{
"category": "external",
"summary": "SUSE Bug 1186062 for CVE-2020-26139",
"url": "https://bugzilla.suse.com/1186062"
},
{
"category": "external",
"summary": "SUSE Bug 1192868 for CVE-2020-26139",
"url": "https://bugzilla.suse.com/1192868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-26139"
},
{
"cve": "CVE-2020-26140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26140"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26140",
"url": "https://www.suse.com/security/cve/CVE-2020-26140"
},
{
"category": "external",
"summary": "SUSE Bug 1185863 for CVE-2020-26140",
"url": "https://bugzilla.suse.com/1185863"
},
{
"category": "external",
"summary": "SUSE Bug 1188528 for CVE-2020-26140",
"url": "https://bugzilla.suse.com/1188528"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26140"
},
{
"cve": "CVE-2020-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26141"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26141",
"url": "https://www.suse.com/security/cve/CVE-2020-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1185987 for CVE-2020-26141",
"url": "https://bugzilla.suse.com/1185987"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-26141"
},
{
"cve": "CVE-2020-26143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26143"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26143",
"url": "https://www.suse.com/security/cve/CVE-2020-26143"
},
{
"category": "external",
"summary": "SUSE Bug 1185863 for CVE-2020-26143",
"url": "https://bugzilla.suse.com/1185863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26143"
},
{
"cve": "CVE-2020-26144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26144"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26144",
"url": "https://www.suse.com/security/cve/CVE-2020-26144"
},
{
"category": "external",
"summary": "SUSE Bug 1185863 for CVE-2020-26144",
"url": "https://bugzilla.suse.com/1185863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26144"
},
{
"cve": "CVE-2020-26145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26145"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26145",
"url": "https://www.suse.com/security/cve/CVE-2020-26145"
},
{
"category": "external",
"summary": "SUSE Bug 1185860 for CVE-2020-26145",
"url": "https://bugzilla.suse.com/1185860"
},
{
"category": "external",
"summary": "SUSE Bug 1246438 for CVE-2020-26145",
"url": "https://bugzilla.suse.com/1246438"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-26145"
},
{
"cve": "CVE-2020-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26146"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26146",
"url": "https://www.suse.com/security/cve/CVE-2020-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1185863 for CVE-2020-26146",
"url": "https://bugzilla.suse.com/1185863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26146"
},
{
"cve": "CVE-2020-26147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26147"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26147",
"url": "https://www.suse.com/security/cve/CVE-2020-26147"
},
{
"category": "external",
"summary": "SUSE Bug 1233723 for CVE-2020-26147",
"url": "https://bugzilla.suse.com/1233723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-26147"
},
{
"cve": "CVE-2020-27777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27777"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27777",
"url": "https://www.suse.com/security/cve/CVE-2020-27777"
},
{
"category": "external",
"summary": "SUSE Bug 1179107 for CVE-2020-27777",
"url": "https://bugzilla.suse.com/1179107"
},
{
"category": "external",
"summary": "SUSE Bug 1179419 for CVE-2020-27777",
"url": "https://bugzilla.suse.com/1179419"
},
{
"category": "external",
"summary": "SUSE Bug 1200343 for CVE-2020-27777",
"url": "https://bugzilla.suse.com/1200343"
},
{
"category": "external",
"summary": "SUSE Bug 1220060 for CVE-2020-27777",
"url": "https://bugzilla.suse.com/1220060"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-27777"
},
{
"cve": "CVE-2020-29368",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-29368"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-29368",
"url": "https://www.suse.com/security/cve/CVE-2020-29368"
},
{
"category": "external",
"summary": "SUSE Bug 1179428 for CVE-2020-29368",
"url": "https://bugzilla.suse.com/1179428"
},
{
"category": "external",
"summary": "SUSE Bug 1179660 for CVE-2020-29368",
"url": "https://bugzilla.suse.com/1179660"
},
{
"category": "external",
"summary": "SUSE Bug 1179664 for CVE-2020-29368",
"url": "https://bugzilla.suse.com/1179664"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-29368"
},
{
"cve": "CVE-2020-29660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-29660"
}
],
"notes": [
{
"category": "general",
"text": "A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-29660",
"url": "https://www.suse.com/security/cve/CVE-2020-29660"
},
{
"category": "external",
"summary": "SUSE Bug 1179745 for CVE-2020-29660",
"url": "https://bugzilla.suse.com/1179745"
},
{
"category": "external",
"summary": "SUSE Bug 1179877 for CVE-2020-29660",
"url": "https://bugzilla.suse.com/1179877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-29660"
},
{
"cve": "CVE-2020-36158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-36158"
}
],
"notes": [
{
"category": "general",
"text": "mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-36158",
"url": "https://www.suse.com/security/cve/CVE-2020-36158"
},
{
"category": "external",
"summary": "SUSE Bug 1180559 for CVE-2020-36158",
"url": "https://bugzilla.suse.com/1180559"
},
{
"category": "external",
"summary": "SUSE Bug 1180562 for CVE-2020-36158",
"url": "https://bugzilla.suse.com/1180562"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-36158"
},
{
"cve": "CVE-2020-36312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-36312"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-36312",
"url": "https://www.suse.com/security/cve/CVE-2020-36312"
},
{
"category": "external",
"summary": "SUSE Bug 1184509 for CVE-2020-36312",
"url": "https://bugzilla.suse.com/1184509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-36312"
},
{
"cve": "CVE-2020-36386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-36386"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-36386",
"url": "https://www.suse.com/security/cve/CVE-2020-36386"
},
{
"category": "external",
"summary": "SUSE Bug 1187038 for CVE-2020-36386",
"url": "https://bugzilla.suse.com/1187038"
},
{
"category": "external",
"summary": "SUSE Bug 1192868 for CVE-2020-36386",
"url": "https://bugzilla.suse.com/1192868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-36386"
},
{
"cve": "CVE-2021-0129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0129"
}
],
"notes": [
{
"category": "general",
"text": "Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0129",
"url": "https://www.suse.com/security/cve/CVE-2021-0129"
},
{
"category": "external",
"summary": "SUSE Bug 1186463 for CVE-2021-0129",
"url": "https://bugzilla.suse.com/1186463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-0129"
},
{
"cve": "CVE-2021-20194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-20194"
}
],
"notes": [
{
"category": "general",
"text": "There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y , CONFIG_CGROUP_BPF=y , CONFIG_HARDENED_USERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in __cgroup_bpf_run_filter_getsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-20194",
"url": "https://www.suse.com/security/cve/CVE-2021-20194"
},
{
"category": "external",
"summary": "SUSE Bug 1181637 for CVE-2021-20194",
"url": "https://bugzilla.suse.com/1181637"
},
{
"category": "external",
"summary": "SUSE Bug 1182010 for CVE-2021-20194",
"url": "https://bugzilla.suse.com/1182010"
},
{
"category": "external",
"summary": "SUSE Bug 1182330 for CVE-2021-20194",
"url": "https://bugzilla.suse.com/1182330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-20194"
},
{
"cve": "CVE-2021-20239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-20239"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-20239",
"url": "https://www.suse.com/security/cve/CVE-2021-20239"
},
{
"category": "external",
"summary": "SUSE Bug 1182010 for CVE-2021-20239",
"url": "https://bugzilla.suse.com/1182010"
},
{
"category": "external",
"summary": "SUSE Bug 1182330 for CVE-2021-20239",
"url": "https://bugzilla.suse.com/1182330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-20239"
},
{
"cve": "CVE-2021-23133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23133"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)-\u003esctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23133",
"url": "https://www.suse.com/security/cve/CVE-2021-23133"
},
{
"category": "external",
"summary": "SUSE Bug 1184675 for CVE-2021-23133",
"url": "https://bugzilla.suse.com/1184675"
},
{
"category": "external",
"summary": "SUSE Bug 1185901 for CVE-2021-23133",
"url": "https://bugzilla.suse.com/1185901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23133"
},
{
"cve": "CVE-2021-28950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28950"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A \"stall on CPU\" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28950",
"url": "https://www.suse.com/security/cve/CVE-2021-28950"
},
{
"category": "external",
"summary": "SUSE Bug 1184194 for CVE-2021-28950",
"url": "https://bugzilla.suse.com/1184194"
},
{
"category": "external",
"summary": "SUSE Bug 1184211 for CVE-2021-28950",
"url": "https://bugzilla.suse.com/1184211"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-28950"
},
{
"cve": "CVE-2021-28971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28971"
}
],
"notes": [
{
"category": "general",
"text": "In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28971",
"url": "https://www.suse.com/security/cve/CVE-2021-28971"
},
{
"category": "external",
"summary": "SUSE Bug 1184196 for CVE-2021-28971",
"url": "https://bugzilla.suse.com/1184196"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-28971"
},
{
"cve": "CVE-2021-29155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29155"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29155",
"url": "https://www.suse.com/security/cve/CVE-2021-29155"
},
{
"category": "external",
"summary": "SUSE Bug 1184942 for CVE-2021-29155",
"url": "https://bugzilla.suse.com/1184942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-29155"
},
{
"cve": "CVE-2021-29646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29646"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29646",
"url": "https://www.suse.com/security/cve/CVE-2021-29646"
},
{
"category": "external",
"summary": "SUSE Bug 1184191 for CVE-2021-29646",
"url": "https://bugzilla.suse.com/1184191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-29646"
},
{
"cve": "CVE-2021-29650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29650"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29650",
"url": "https://www.suse.com/security/cve/CVE-2021-29650"
},
{
"category": "external",
"summary": "SUSE Bug 1184208 for CVE-2021-29650",
"url": "https://bugzilla.suse.com/1184208"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-29650"
},
{
"cve": "CVE-2021-29657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29657"
}
],
"notes": [
{
"category": "general",
"text": "arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29657",
"url": "https://www.suse.com/security/cve/CVE-2021-29657"
},
{
"category": "external",
"summary": "SUSE Bug 1188637 for CVE-2021-29657",
"url": "https://bugzilla.suse.com/1188637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29657"
},
{
"cve": "CVE-2021-31440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-31440"
}
],
"notes": [
{
"category": "general",
"text": "This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-31440",
"url": "https://www.suse.com/security/cve/CVE-2021-31440"
},
{
"category": "external",
"summary": "SUSE Bug 1190126 for CVE-2021-31440",
"url": "https://bugzilla.suse.com/1190126"
},
{
"category": "external",
"summary": "SUSE Bug 1190127 for CVE-2021-31440",
"url": "https://bugzilla.suse.com/1190127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-31440"
},
{
"cve": "CVE-2021-31829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-31829"
}
],
"notes": [
{
"category": "general",
"text": "kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-31829",
"url": "https://www.suse.com/security/cve/CVE-2021-31829"
},
{
"category": "external",
"summary": "SUSE Bug 1188561 for CVE-2021-31829",
"url": "https://bugzilla.suse.com/1188561"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-31829"
},
{
"cve": "CVE-2021-31916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-31916"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-31916",
"url": "https://www.suse.com/security/cve/CVE-2021-31916"
},
{
"category": "external",
"summary": "SUSE Bug 1192781 for CVE-2021-31916",
"url": "https://bugzilla.suse.com/1192781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-31916"
},
{
"cve": "CVE-2021-33033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-33033"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-33033",
"url": "https://www.suse.com/security/cve/CVE-2021-33033"
},
{
"category": "external",
"summary": "SUSE Bug 1186109 for CVE-2021-33033",
"url": "https://bugzilla.suse.com/1186109"
},
{
"category": "external",
"summary": "SUSE Bug 1186283 for CVE-2021-33033",
"url": "https://bugzilla.suse.com/1186283"
},
{
"category": "external",
"summary": "SUSE Bug 1188876 for CVE-2021-33033",
"url": "https://bugzilla.suse.com/1188876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-33033"
},
{
"cve": "CVE-2021-33098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-33098"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-33098",
"url": "https://www.suse.com/security/cve/CVE-2021-33098"
},
{
"category": "external",
"summary": "SUSE Bug 1192877 for CVE-2021-33098",
"url": "https://bugzilla.suse.com/1192877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-33098"
},
{
"cve": "CVE-2021-33200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-33200"
}
],
"notes": [
{
"category": "general",
"text": "kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. In particular, there is a corner case where the off reg causes a masking direction change, which then results in an incorrect final aux-\u003ealu_limit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-33200",
"url": "https://www.suse.com/security/cve/CVE-2021-33200"
},
{
"category": "external",
"summary": "SUSE Bug 1186484 for CVE-2021-33200",
"url": "https://bugzilla.suse.com/1186484"
},
{
"category": "external",
"summary": "SUSE Bug 1186498 for CVE-2021-33200",
"url": "https://bugzilla.suse.com/1186498"
},
{
"category": "external",
"summary": "SUSE Bug 1224878 for CVE-2021-33200",
"url": "https://bugzilla.suse.com/1224878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-33200"
},
{
"cve": "CVE-2021-3348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3348"
}
],
"notes": [
{
"category": "general",
"text": "nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3348",
"url": "https://www.suse.com/security/cve/CVE-2021-3348"
},
{
"category": "external",
"summary": "SUSE Bug 1181504 for CVE-2021-3348",
"url": "https://bugzilla.suse.com/1181504"
},
{
"category": "external",
"summary": "SUSE Bug 1181645 for CVE-2021-3348",
"url": "https://bugzilla.suse.com/1181645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3348"
},
{
"cve": "CVE-2021-3444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3444"
}
],
"notes": [
{
"category": "general",
"text": "The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (\"bpf: Fix truncation handling for mod32 dst reg wrt zero\") and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3444",
"url": "https://www.suse.com/security/cve/CVE-2021-3444"
},
{
"category": "external",
"summary": "SUSE Bug 1184170 for CVE-2021-3444",
"url": "https://bugzilla.suse.com/1184170"
},
{
"category": "external",
"summary": "SUSE Bug 1184171 for CVE-2021-3444",
"url": "https://bugzilla.suse.com/1184171"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3444"
},
{
"cve": "CVE-2021-3489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3489"
}
],
"notes": [
{
"category": "general",
"text": "The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee (\"bpf, ringbuf: Deny reserve of buffers larger than ringbuf\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 (\"bpf: Implement BPF ring buffer and verifier support for it\") (v5.8-rc1).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3489",
"url": "https://www.suse.com/security/cve/CVE-2021-3489"
},
{
"category": "external",
"summary": "SUSE Bug 1185640 for CVE-2021-3489",
"url": "https://bugzilla.suse.com/1185640"
},
{
"category": "external",
"summary": "SUSE Bug 1185856 for CVE-2021-3489",
"url": "https://bugzilla.suse.com/1185856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3489"
},
{
"cve": "CVE-2021-3564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3564"
}
],
"notes": [
{
"category": "general",
"text": "A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3564",
"url": "https://www.suse.com/security/cve/CVE-2021-3564"
},
{
"category": "external",
"summary": "SUSE Bug 1186207 for CVE-2021-3564",
"url": "https://bugzilla.suse.com/1186207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3564"
},
{
"cve": "CVE-2021-3573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3573"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3573",
"url": "https://www.suse.com/security/cve/CVE-2021-3573"
},
{
"category": "external",
"summary": "SUSE Bug 1186666 for CVE-2021-3573",
"url": "https://bugzilla.suse.com/1186666"
},
{
"category": "external",
"summary": "SUSE Bug 1187054 for CVE-2021-3573",
"url": "https://bugzilla.suse.com/1187054"
},
{
"category": "external",
"summary": "SUSE Bug 1188172 for CVE-2021-3573",
"url": "https://bugzilla.suse.com/1188172"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3573"
},
{
"cve": "CVE-2021-3600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3600"
}
],
"notes": [
{
"category": "general",
"text": "It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3600",
"url": "https://www.suse.com/security/cve/CVE-2021-3600"
},
{
"category": "external",
"summary": "SUSE Bug 1187721 for CVE-2021-3600",
"url": "https://bugzilla.suse.com/1187721"
},
{
"category": "external",
"summary": "SUSE Bug 1187724 for CVE-2021-3600",
"url": "https://bugzilla.suse.com/1187724"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3600"
},
{
"cve": "CVE-2021-3635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3635"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3635",
"url": "https://www.suse.com/security/cve/CVE-2021-3635"
},
{
"category": "external",
"summary": "SUSE Bug 1189169 for CVE-2021-3635",
"url": "https://bugzilla.suse.com/1189169"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3635"
},
{
"cve": "CVE-2021-3659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3659"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3659",
"url": "https://www.suse.com/security/cve/CVE-2021-3659"
},
{
"category": "external",
"summary": "SUSE Bug 1188876 for CVE-2021-3659",
"url": "https://bugzilla.suse.com/1188876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3659"
},
{
"cve": "CVE-2021-3679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3679"
}
],
"notes": [
{
"category": "general",
"text": "A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3679",
"url": "https://www.suse.com/security/cve/CVE-2021-3679"
},
{
"category": "external",
"summary": "SUSE Bug 1189057 for CVE-2021-3679",
"url": "https://bugzilla.suse.com/1189057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3679"
},
{
"cve": "CVE-2021-3732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3732"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3732",
"url": "https://www.suse.com/security/cve/CVE-2021-3732"
},
{
"category": "external",
"summary": "SUSE Bug 1189706 for CVE-2021-3732",
"url": "https://bugzilla.suse.com/1189706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3732"
},
{
"cve": "CVE-2021-4442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4442"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: add sanity tests to TCP_QUEUE_SEQ\n\nQingyu Li reported a syzkaller bug where the repro\nchanges RCV SEQ _after_ restoring data in the receive queue.\n\nmprotect(0x4aa000, 12288, PROT_READ) = 0\nmmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000\nmmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000\nmmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000\nsocket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3\nsetsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0\nconnect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, \"::1\", \u0026sin6_addr), sin6_scope_id=0}, 28) = 0\nsetsockopt(3, SOL_TCP, TCP_REPAIR_QUEUE, [1], 4) = 0\nsendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=\"0x0000000000000003\\0\\0\", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 20\nsetsockopt(3, SOL_TCP, TCP_REPAIR, [0], 4) = 0\nsetsockopt(3, SOL_TCP, TCP_QUEUE_SEQ, [128], 4) = 0\nrecvfrom(3, NULL, 20, 0, NULL, NULL) = -1 ECONNRESET (Connection reset by peer)\n\nsyslog shows:\n[ 111.205099] TCP recvmsg seq # bug 2: copied 80, seq 0, rcvnxt 80, fl 0\n[ 111.207894] WARNING: CPU: 1 PID: 356 at net/ipv4/tcp.c:2343 tcp_recvmsg_locked+0x90e/0x29a0\n\nThis should not be allowed. TCP_QUEUE_SEQ should only be used\nwhen queues are empty.\n\nThis patch fixes this case, and the tx path as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4442",
"url": "https://www.suse.com/security/cve/CVE-2021-4442"
},
{
"category": "external",
"summary": "SUSE Bug 1229912 for CVE-2021-4442",
"url": "https://bugzilla.suse.com/1229912"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4442"
},
{
"cve": "CVE-2021-46905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46905"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hso: fix NULL-deref on disconnect regression\n\nCommit 8a12f8836145 (\"net: hso: fix null-ptr-deref during tty device\nunregistration\") fixed the racy minor allocation reported by syzbot, but\nintroduced an unconditional NULL-pointer dereference on every disconnect\ninstead.\n\nSpecifically, the serial device table must no longer be accessed after\nthe minor has been released by hso_serial_tty_unregister().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46905",
"url": "https://www.suse.com/security/cve/CVE-2021-46905"
},
{
"category": "external",
"summary": "SUSE Bug 1220418 for CVE-2021-46905",
"url": "https://bugzilla.suse.com/1220418"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-46905"
},
{
"cve": "CVE-2021-46983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46983"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: Fix NULL deref when SEND is completed with error\n\nWhen running some traffic and taking down the link on peer, a\nretry counter exceeded error is received. This leads to\nnvmet_rdma_error_comp which tried accessing the cq_context to\nobtain the queue. The cq_context is no longer valid after the\nfix to use shared CQ mechanism and should be obtained similar\nto how it is obtained in other functions from the wc-\u003eqp.\n\n[ 905.786331] nvmet_rdma: SEND for CQE 0x00000000e3337f90 failed with status transport retry counter exceeded (12).\n[ 905.832048] BUG: unable to handle kernel NULL pointer dereference at 0000000000000048\n[ 905.839919] PGD 0 P4D 0\n[ 905.842464] Oops: 0000 1 SMP NOPTI\n[ 905.846144] CPU: 13 PID: 1557 Comm: kworker/13:1H Kdump: loaded Tainted: G OE --------- - - 4.18.0-304.el8.x86_64 #1\n[ 905.872135] RIP: 0010:nvmet_rdma_error_comp+0x5/0x1b [nvmet_rdma]\n[ 905.878259] Code: 19 4f c0 e8 89 b3 a5 f6 e9 5b e0 ff ff 0f b7 75 14 4c 89 ea 48 c7 c7 08 1a 4f c0 e8 71 b3 a5 f6 e9 4b e0 ff ff 0f 1f 44 00 00 \u003c48\u003e 8b 47 48 48 85 c0 74 08 48 89 c7 e9 98 bf 49 00 e9 c3 e3 ff ff\n[ 905.897135] RSP: 0018:ffffab601c45fe28 EFLAGS: 00010246\n[ 905.902387] RAX: 0000000000000065 RBX: ffff9e729ea2f800 RCX: 0000000000000000\n[ 905.909558] RDX: 0000000000000000 RSI: ffff9e72df9567c8 RDI: 0000000000000000\n[ 905.916731] RBP: ffff9e729ea2b400 R08: 000000000000074d R09: 0000000000000074\n[ 905.923903] R10: 0000000000000000 R11: ffffab601c45fcc0 R12: 0000000000000010\n[ 905.931074] R13: 0000000000000000 R14: 0000000000000010 R15: ffff9e729ea2f400\n[ 905.938247] FS: 0000000000000000(0000) GS:ffff9e72df940000(0000) knlGS:0000000000000000\n[ 905.938249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 905.950067] nvmet_rdma: SEND for CQE 0x00000000c7356cca failed with status transport retry counter exceeded (12).\n[ 905.961855] CR2: 0000000000000048 CR3: 000000678d010004 CR4: 00000000007706e0\n[ 905.961855] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 905.961856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 905.961857] PKRU: 55555554\n[ 906.010315] Call Trace:\n[ 906.012778] __ib_process_cq+0x89/0x170 [ib_core]\n[ 906.017509] ib_cq_poll_work+0x26/0x80 [ib_core]\n[ 906.022152] process_one_work+0x1a7/0x360\n[ 906.026182] ? create_worker+0x1a0/0x1a0\n[ 906.030123] worker_thread+0x30/0x390\n[ 906.033802] ? create_worker+0x1a0/0x1a0\n[ 906.037744] kthread+0x116/0x130\n[ 906.040988] ? kthread_flush_work_fn+0x10/0x10\n[ 906.045456] ret_from_fork+0x1f/0x40",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46983",
"url": "https://www.suse.com/security/cve/CVE-2021-46983"
},
{
"category": "external",
"summary": "SUSE Bug 1220639 for CVE-2021-46983",
"url": "https://bugzilla.suse.com/1220639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-46983"
},
{
"cve": "CVE-2021-47011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47011"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: memcontrol: slab: fix obtain a reference to a freeing memcg\n\nPatch series \"Use obj_cgroup APIs to charge kmem pages\", v5.\n\nSince Roman\u0027s series \"The new cgroup slab memory controller\" applied.\nAll slab objects are charged with the new APIs of obj_cgroup. The new\nAPIs introduce a struct obj_cgroup to charge slab objects. It prevents\nlong-living objects from pinning the original memory cgroup in the\nmemory. But there are still some corner objects (e.g. allocations\nlarger than order-1 page on SLUB) which are not charged with the new\nAPIs. Those objects (include the pages which are allocated from buddy\nallocator directly) are charged as kmem pages which still hold a\nreference to the memory cgroup.\n\nE.g. We know that the kernel stack is charged as kmem pages because the\nsize of the kernel stack can be greater than 2 pages (e.g. 16KB on\nx86_64 or arm64). If we create a thread (suppose the thread stack is\ncharged to memory cgroup A) and then move it from memory cgroup A to\nmemory cgroup B. Because the kernel stack of the thread hold a\nreference to the memory cgroup A. The thread can pin the memory cgroup\nA in the memory even if we remove the cgroup A. If we want to see this\nscenario by using the following script. We can see that the system has\nadded 500 dying cgroups (This is not a real world issue, just a script\nto show that the large kmallocs are charged as kmem pages which can pin\nthe memory cgroup in the memory).\n\n\t#!/bin/bash\n\n\tcat /proc/cgroups | grep memory\n\n\tcd /sys/fs/cgroup/memory\n\techo 1 \u003e memory.move_charge_at_immigrate\n\n\tfor i in range{1..500}\n\tdo\n\t\tmkdir kmem_test\n\t\techo $$ \u003e kmem_test/cgroup.procs\n\t\tsleep 3600 \u0026\n\t\techo $$ \u003e cgroup.procs\n\t\techo `cat kmem_test/cgroup.procs` \u003e cgroup.procs\n\t\trmdir kmem_test\n\tdone\n\n\tcat /proc/cgroups | grep memory\n\nThis patchset aims to make those kmem pages to drop the reference to\nmemory cgroup by using the APIs of obj_cgroup. Finally, we can see that\nthe number of the dying cgroups will not increase if we run the above test\nscript.\n\nThis patch (of 7):\n\nThe rcu_read_lock/unlock only can guarantee that the memcg will not be\nfreed, but it cannot guarantee the success of css_get (which is in the\nrefill_stock when cached memcg changed) to memcg.\n\n rcu_read_lock()\n memcg = obj_cgroup_memcg(old)\n __memcg_kmem_uncharge(memcg)\n refill_stock(memcg)\n if (stock-\u003ecached != memcg)\n // css_get can change the ref counter from 0 back to 1.\n css_get(\u0026memcg-\u003ecss)\n rcu_read_unlock()\n\nThis fix is very like the commit:\n\n eefbfa7fd678 (\"mm: memcg/slab: fix use after free in obj_cgroup_charge\")\n\nFix this by holding a reference to the memcg which is passed to the\n__memcg_kmem_uncharge() before calling __memcg_kmem_uncharge().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47011",
"url": "https://www.suse.com/security/cve/CVE-2021-47011"
},
{
"category": "external",
"summary": "SUSE Bug 1220793 for CVE-2021-47011",
"url": "https://bugzilla.suse.com/1220793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-47011"
},
{
"cve": "CVE-2021-47080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47080"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Prevent divide-by-zero error triggered by the user\n\nThe user_entry_size is supplied by the user and later used as a\ndenominator to calculate number of entries. The zero supplied by the user\nwill trigger the following divide-by-zero error:\n\n divide error: 0000 [#1] SMP KASAN PTI\n CPU: 4 PID: 497 Comm: c_repro Not tainted 5.13.0-rc1+ #281\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n RIP: 0010:ib_uverbs_handler_UVERBS_METHOD_QUERY_GID_TABLE+0x1b1/0x510\n Code: 87 59 03 00 00 e8 9f ab 1e ff 48 8d bd a8 00 00 00 e8 d3 70 41 ff 44 0f b7 b5 a8 00 00 00 e8 86 ab 1e ff 31 d2 4c 89 f0 31 ff \u003c49\u003e f7 f5 48 89 d6 48 89 54 24 10 48 89 04 24 e8 1b ad 1e ff 48 8b\n RSP: 0018:ffff88810416f828 EFLAGS: 00010246\n RAX: 0000000000000008 RBX: 1ffff1102082df09 RCX: ffffffff82183f3d\n RDX: 0000000000000000 RSI: ffff888105f2da00 RDI: 0000000000000000\n RBP: ffff88810416fa98 R08: 0000000000000001 R09: ffffed102082df5f\n R10: ffff88810416faf7 R11: ffffed102082df5e R12: 0000000000000000\n R13: 0000000000000000 R14: 0000000000000008 R15: ffff88810416faf0\n FS: 00007f5715efa740(0000) GS:ffff88811a700000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000020000840 CR3: 000000010c2e0001 CR4: 0000000000370ea0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n ? ib_uverbs_handler_UVERBS_METHOD_INFO_HANDLES+0x4b0/0x4b0\n ib_uverbs_cmd_verbs+0x1546/0x1940\n ib_uverbs_ioctl+0x186/0x240\n __x64_sys_ioctl+0x38a/0x1220\n do_syscall_64+0x3f/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47080",
"url": "https://www.suse.com/security/cve/CVE-2021-47080"
},
{
"category": "external",
"summary": "SUSE Bug 1220842 for CVE-2021-47080",
"url": "https://bugzilla.suse.com/1220842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47080"
},
{
"cve": "CVE-2022-20166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-20166"
}
],
"notes": [
{
"category": "general",
"text": "In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-20166",
"url": "https://www.suse.com/security/cve/CVE-2022-20166"
},
{
"category": "external",
"summary": "SUSE Bug 1200598 for CVE-2022-20166",
"url": "https://bugzilla.suse.com/1200598"
},
{
"category": "external",
"summary": "SUSE Bug 1212284 for CVE-2022-20166",
"url": "https://bugzilla.suse.com/1212284"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-20166"
},
{
"cve": "CVE-2022-50042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50042"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: genl: fix error path memory leak in policy dumping\n\nIf construction of the array of policies fails when recording\nnon-first policy we need to unwind.\n\nnetlink_policy_dump_add_policy() itself also needs fixing as\nit currently gives up on error without recording the allocated\npointer in the pstate pointer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50042",
"url": "https://www.suse.com/security/cve/CVE-2022-50042"
},
{
"category": "external",
"summary": "SUSE Bug 1244951 for CVE-2022-50042",
"url": "https://bugzilla.suse.com/1244951"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50042"
},
{
"cve": "CVE-2022-50073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50073"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tap: NULL pointer derefence in dev_parse_header_protocol when skb-\u003edev is null\n\nFixes a NULL pointer derefence bug triggered from tap driver.\nWhen tap_get_user calls virtio_net_hdr_to_skb the skb-\u003edev is null\n(in tap.c skb-\u003edev is set after the call to virtio_net_hdr_to_skb)\nvirtio_net_hdr_to_skb calls dev_parse_header_protocol which\nneeds skb-\u003edev field to be valid.\n\nThe line that trigers the bug is in dev_parse_header_protocol\n(dev is at offset 0x10 from skb and is stored in RAX register)\n if (!dev-\u003eheader_ops || !dev-\u003eheader_ops-\u003eparse_protocol)\n 22e1: mov 0x10(%rbx),%rax\n 22e5:\t mov 0x230(%rax),%rax\n\nSetting skb-\u003edev before the call in tap.c fixes the issue.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000230\nRIP: 0010:virtio_net_hdr_to_skb.constprop.0+0x335/0x410 [tap]\nCode: c0 0f 85 b7 fd ff ff eb d4 41 39 c6 77 cf 29 c6 48 89 df 44 01 f6 e8 7a 79 83 c1 48 85 c0 0f 85 d9 fd ff ff eb b7 48 8b 43 10 \u003c48\u003e 8b 80 30 02 00 00 48 85 c0 74 55 48 8b 40 28 48 85 c0 74 4c 48\nRSP: 0018:ffffc90005c27c38 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffff888298f25300 RCX: 0000000000000010\nRDX: 0000000000000005 RSI: ffffc90005c27cb6 RDI: ffff888298f25300\nRBP: ffffc90005c27c80 R08: 00000000ffffffea R09: 00000000000007e8\nR10: ffff88858ec77458 R11: 0000000000000000 R12: 0000000000000001\nR13: 0000000000000014 R14: ffffc90005c27e08 R15: ffffc90005c27cb6\nFS: 0000000000000000(0000) GS:ffff88858ec40000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000230 CR3: 0000000281408006 CR4: 00000000003706e0\nCall Trace:\n tap_get_user+0x3f1/0x540 [tap]\n tap_sendmsg+0x56/0x362 [tap]\n ? get_tx_bufs+0xc2/0x1e0 [vhost_net]\n handle_tx_copy+0x114/0x670 [vhost_net]\n handle_tx+0xb0/0xe0 [vhost_net]\n handle_tx_kick+0x15/0x20 [vhost_net]\n vhost_worker+0x7b/0xc0 [vhost]\n ? vhost_vring_call_reset+0x40/0x40 [vhost]\n kthread+0xfa/0x120\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x1f/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50073",
"url": "https://www.suse.com/security/cve/CVE-2022-50073"
},
{
"category": "external",
"summary": "SUSE Bug 1244978 for CVE-2022-50073",
"url": "https://bugzilla.suse.com/1244978"
},
{
"category": "external",
"summary": "SUSE Bug 1274550 for CVE-2022-50073",
"url": "https://bugzilla.suse.com/1274550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50073"
},
{
"cve": "CVE-2023-53578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()\n\nSyzbot reported a bug as following:\n\n=====================================================\nBUG: KMSAN: uninit-value in qrtr_tx_resume+0x185/0x1f0 net/qrtr/af_qrtr.c:230\n qrtr_tx_resume+0x185/0x1f0 net/qrtr/af_qrtr.c:230\n qrtr_endpoint_post+0xf85/0x11b0 net/qrtr/af_qrtr.c:519\n qrtr_tun_write_iter+0x270/0x400 net/qrtr/tun.c:108\n call_write_iter include/linux/fs.h:2189 [inline]\n aio_write+0x63a/0x950 fs/aio.c:1600\n io_submit_one+0x1d1c/0x3bf0 fs/aio.c:2019\n __do_sys_io_submit fs/aio.c:2078 [inline]\n __se_sys_io_submit+0x293/0x770 fs/aio.c:2048\n __x64_sys_io_submit+0x92/0xd0 fs/aio.c:2048\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUninit was created at:\n slab_post_alloc_hook mm/slab.h:766 [inline]\n slab_alloc_node mm/slub.c:3452 [inline]\n __kmem_cache_alloc_node+0x71f/0xce0 mm/slub.c:3491\n __do_kmalloc_node mm/slab_common.c:967 [inline]\n __kmalloc_node_track_caller+0x114/0x3b0 mm/slab_common.c:988\n kmalloc_reserve net/core/skbuff.c:492 [inline]\n __alloc_skb+0x3af/0x8f0 net/core/skbuff.c:565\n __netdev_alloc_skb+0x120/0x7d0 net/core/skbuff.c:630\n qrtr_endpoint_post+0xbd/0x11b0 net/qrtr/af_qrtr.c:446\n qrtr_tun_write_iter+0x270/0x400 net/qrtr/tun.c:108\n call_write_iter include/linux/fs.h:2189 [inline]\n aio_write+0x63a/0x950 fs/aio.c:1600\n io_submit_one+0x1d1c/0x3bf0 fs/aio.c:2019\n __do_sys_io_submit fs/aio.c:2078 [inline]\n __se_sys_io_submit+0x293/0x770 fs/aio.c:2048\n __x64_sys_io_submit+0x92/0xd0 fs/aio.c:2048\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nIt is because that skb-\u003elen requires at least sizeof(struct qrtr_ctrl_pkt)\nin qrtr_tx_resume(). And skb-\u003elen equals to size in qrtr_endpoint_post().\nBut size is less than sizeof(struct qrtr_ctrl_pkt) when qrtr_cb-\u003etype\nequals to QRTR_TYPE_RESUME_TX in qrtr_endpoint_post() under the syzbot\nscenario. This triggers the uninit variable access bug.\n\nAdd size check when qrtr_cb-\u003etype equals to QRTR_TYPE_RESUME_TX in\nqrtr_endpoint_post() to fix the bug.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53578",
"url": "https://www.suse.com/security/cve/CVE-2023-53578"
},
{
"category": "external",
"summary": "SUSE Bug 1251174 for CVE-2023-53578",
"url": "https://bugzilla.suse.com/1251174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53578"
},
{
"cve": "CVE-2023-53598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: mhi: host: Range check CHDBOFF and ERDBOFF\n\nIf the value read from the CHDBOFF and ERDBOFF registers is outside the\nrange of the MHI register space then an invalid address might be computed\nwhich later causes a kernel panic. Range check the read value to prevent\na crash due to bad data from the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53598",
"url": "https://www.suse.com/security/cve/CVE-2023-53598"
},
{
"category": "external",
"summary": "SUSE Bug 1251162 for CVE-2023-53598",
"url": "https://bugzilla.suse.com/1251162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53598"
},
{
"cve": "CVE-2023-53607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ymfpci: Fix BUG_ON in probe function\n\nThe snd_dma_buffer.bytes field now contains the aligned size, which this\nsnd_BUG_ON() did not account for, resulting in the following:\n\n[ 9.625915] ------------[ cut here ]------------\n[ 9.633440] WARNING: CPU: 0 PID: 126 at sound/pci/ymfpci/ymfpci_main.c:2168 snd_ymfpci_create+0x681/0x698 [snd_ymfpci]\n[ 9.648926] Modules linked in: snd_ymfpci(+) snd_intel_dspcfg kvm(+) snd_intel_sdw_acpi snd_ac97_codec snd_mpu401_uart snd_opl3_lib irqbypass snd_hda_codec gameport snd_rawmidi crct10dif_pclmul crc32_pclmul cfg80211 snd_hda_core polyval_clmulni polyval_generic gf128mul snd_seq_device ghash_clmulni_intel snd_hwdep ac97_bus sha512_ssse3 rfkill snd_pcm aesni_intel tg3 snd_timer crypto_simd snd mxm_wmi libphy cryptd k10temp fam15h_power pcspkr soundcore sp5100_tco wmi acpi_cpufreq mac_hid dm_multipath sg loop fuse dm_mod bpf_preload ip_tables x_tables ext4 crc32c_generic crc16 mbcache jbd2 sr_mod cdrom ata_generic pata_acpi firewire_ohci crc32c_intel firewire_core xhci_pci crc_itu_t pata_via xhci_pci_renesas floppy\n[ 9.711849] CPU: 0 PID: 126 Comm: kworker/0:2 Not tainted 6.1.21-1-lts #1 08d2e5ece03136efa7c6aeea9a9c40916b1bd8da\n[ 9.722200] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./990FX Extreme4, BIOS P2.70 06/05/2014\n[ 9.732204] Workqueue: events work_for_cpu_fn\n[ 9.736580] RIP: 0010:snd_ymfpci_create+0x681/0x698 [snd_ymfpci]\n[ 9.742594] Code: 8c c0 4c 89 e2 48 89 df 48 c7 c6 92 c6 8c c0 e8 15 d0 e9 ff 48 83 c4 08 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d3 7a 33 e3 \u003c0f\u003e 0b e9 cb fd ff ff 41 bd fb ff ff ff eb db 41 bd f4 ff ff ff eb\n[ 9.761358] RSP: 0018:ffffab64804e7da0 EFLAGS: 00010287\n[ 9.766594] RAX: ffff8fa2df06c400 RBX: ffff8fa3073a8000 RCX: ffff8fa303fbc4a8\n[ 9.773734] RDX: ffff8fa2df06d000 RSI: 0000000000000010 RDI: 0000000000000020\n[ 9.780876] RBP: ffff8fa300b5d0d0 R08: ffff8fa3073a8e50 R09: 00000000df06bf00\n[ 9.788018] R10: ffff8fa2df06bf00 R11: 00000000df068200 R12: ffff8fa3073a8918\n[ 9.795159] R13: 0000000000000000 R14: 0000000000000080 R15: ffff8fa2df068200\n[ 9.802317] FS: 0000000000000000(0000) GS:ffff8fa9fec00000(0000) knlGS:0000000000000000\n[ 9.810414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 9.816158] CR2: 000055febaf66500 CR3: 0000000101a2e000 CR4: 00000000000406f0\n[ 9.823301] Call Trace:\n[ 9.825747] \u003cTASK\u003e\n[ 9.827889] snd_card_ymfpci_probe+0x194/0x950 [snd_ymfpci b78a5fe64b5663a6390a909c67808567e3e73615]\n[ 9.837030] ? finish_task_switch.isra.0+0x90/0x2d0\n[ 9.841918] local_pci_probe+0x45/0x80\n[ 9.845680] work_for_cpu_fn+0x1a/0x30\n[ 9.849431] process_one_work+0x1c7/0x380\n[ 9.853464] worker_thread+0x1af/0x390\n[ 9.857225] ? rescuer_thread+0x3b0/0x3b0\n[ 9.861254] kthread+0xde/0x110\n[ 9.864414] ? kthread_complete_and_exit+0x20/0x20\n[ 9.869210] ret_from_fork+0x22/0x30\n[ 9.872792] \u003c/TASK\u003e\n[ 9.874985] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53607",
"url": "https://www.suse.com/security/cve/CVE-2023-53607"
},
{
"category": "external",
"summary": "SUSE Bug 1251136 for CVE-2023-53607",
"url": "https://bugzilla.suse.com/1251136"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-348.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-348.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-348.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53607"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…