RHSA-2022:6460
Vulnerability from csaf_opensuse - Published: 2022-09-13 00:00 - Updated: 2026-09-20 11:22Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2022:6460.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2022:6460.
Patchnames: RHSA-2022:6460
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-21123
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-21123
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-21123
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-21123
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-21123
Threats
Impact
moderate
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2022:6460.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:6460.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2022:6460",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_6460.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-21123 page",
"url": "https://www.suse.com/security/cve/CVE-2022-21123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-21125 page",
"url": "https://www.suse.com/security/cve/CVE-2022-21125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-21166 page",
"url": "https://www.suse.com/security/cve/CVE-2022-21166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-48943 page",
"url": "https://www.suse.com/security/cve/CVE-2022-48943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49557 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49722 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49722/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:22:34Z",
"generator": {
"date": "2022-09-13T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2022:6460",
"initial_release_date": "2022-09-13T00:00:00Z",
"revision_history": [
{
"date": "2022-09-13T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:22:34Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-372.26.1.el8_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"product_id": "kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-372.26.1.el8_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-372.26.1.el8_6?arch=x86_64\u0026upstream=bpftool-0:4.18.0-372.26.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-372.26.1.el8_6?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-372.26.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-372.26.1.el8_6?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-372.26.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-372.26.1.el8_6?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-372.26.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-372.26.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "perf-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "perf-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-372.26.1.el8_6?arch=x86_64\u0026upstream=perf-0:4.18.0-372.26.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-372.26.1.el8_6.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-372.26.1.el8_6.x86_64",
"product_id": "python3-perf-0:4.18.0-372.26.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-372.26.1.el8_6?arch=x86_64\u0026upstream=perf-0:4.18.0-372.26.1.el8_6.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-372.26.1.el8_6.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "perf-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-372.26.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-372.26.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-21123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-21123"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-21123",
"url": "https://www.suse.com/security/cve/CVE-2022-21123"
},
{
"category": "external",
"summary": "SUSE Bug 1199650 for CVE-2022-21123",
"url": "https://bugzilla.suse.com/1199650"
},
{
"category": "external",
"summary": "SUSE Bug 1200549 for CVE-2022-21123",
"url": "https://bugzilla.suse.com/1200549"
},
{
"category": "external",
"summary": "SUSE Bug 1209075 for CVE-2022-21123",
"url": "https://bugzilla.suse.com/1209075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-21123"
},
{
"cve": "CVE-2022-21125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-21125"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-21125",
"url": "https://www.suse.com/security/cve/CVE-2022-21125"
},
{
"category": "external",
"summary": "SUSE Bug 1199650 for CVE-2022-21125",
"url": "https://bugzilla.suse.com/1199650"
},
{
"category": "external",
"summary": "SUSE Bug 1200549 for CVE-2022-21125",
"url": "https://bugzilla.suse.com/1200549"
},
{
"category": "external",
"summary": "SUSE Bug 1209074 for CVE-2022-21125",
"url": "https://bugzilla.suse.com/1209074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-21125"
},
{
"cve": "CVE-2022-21166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-21166"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-21166",
"url": "https://www.suse.com/security/cve/CVE-2022-21166"
},
{
"category": "external",
"summary": "SUSE Bug 1199650 for CVE-2022-21166",
"url": "https://bugzilla.suse.com/1199650"
},
{
"category": "external",
"summary": "SUSE Bug 1200549 for CVE-2022-21166",
"url": "https://bugzilla.suse.com/1200549"
},
{
"category": "external",
"summary": "SUSE Bug 1209073 for CVE-2022-21166",
"url": "https://bugzilla.suse.com/1209073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-21166"
},
{
"cve": "CVE-2022-48943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-48943"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: make apf token non-zero to fix bug\n\nIn current async pagefault logic, when a page is ready, KVM relies on\nkvm_arch_can_dequeue_async_page_present() to determine whether to deliver\na READY event to the Guest. This function test token value of struct\nkvm_vcpu_pv_apf_data, which must be reset to zero by Guest kernel when a\nREADY event is finished by Guest. If value is zero meaning that a READY\nevent is done, so the KVM can deliver another.\nBut the kvm_arch_setup_async_pf() may produce a valid token with zero\nvalue, which is confused with previous mention and may lead the loss of\nthis READY event.\n\nThis bug may cause task blocked forever in Guest:\n INFO: task stress:7532 blocked for more than 1254 seconds.\n Not tainted 5.10.0 #16\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:stress state:D stack: 0 pid: 7532 ppid: 1409\n flags:0x00000080\n Call Trace:\n __schedule+0x1e7/0x650\n schedule+0x46/0xb0\n kvm_async_pf_task_wait_schedule+0xad/0xe0\n ? exit_to_user_mode_prepare+0x60/0x70\n __kvm_handle_async_pf+0x4f/0xb0\n ? asm_exc_page_fault+0x8/0x30\n exc_page_fault+0x6f/0x110\n ? asm_exc_page_fault+0x8/0x30\n asm_exc_page_fault+0x1e/0x30\n RIP: 0033:0x402d00\n RSP: 002b:00007ffd31912500 EFLAGS: 00010206\n RAX: 0000000000071000 RBX: ffffffffffffffff RCX: 00000000021a32b0\n RDX: 000000000007d011 RSI: 000000000007d000 RDI: 00000000021262b0\n RBP: 00000000021262b0 R08: 0000000000000003 R09: 0000000000000086\n R10: 00000000000000eb R11: 00007fefbdf2baa0 R12: 0000000000000000\n R13: 0000000000000002 R14: 000000000007d000 R15: 0000000000001000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-48943",
"url": "https://www.suse.com/security/cve/CVE-2022-48943"
},
{
"category": "external",
"summary": "SUSE Bug 1229645 for CVE-2022-48943",
"url": "https://bugzilla.suse.com/1229645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-48943"
},
{
"cve": "CVE-2022-49557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)\n\nSet the starting uABI size of KVM\u0027s guest FPU to \u0027struct kvm_xsave\u0027,\ni.e. to KVM\u0027s historical uABI size. When saving FPU state for usersapce,\nKVM (well, now the FPU) sets the FP+SSE bits in the XSAVE header even if\nthe host doesn\u0027t support XSAVE. Setting the XSAVE header allows the VM\nto be migrated to a host that does support XSAVE without the new host\nhaving to handle FPU state that may or may not be compatible with XSAVE.\n\nSetting the uABI size to the host\u0027s default size results in out-of-bounds\nwrites (setting the FP+SSE bits) and data corruption (that is thankfully\ncaught by KASAN) when running on hosts without XSAVE, e.g. on Core2 CPUs.\n\nWARN if the default size is larger than KVM\u0027s historical uABI size; all\nfeatures that can push the FPU size beyond the historical size must be\nopt-in.\n\n ==================================================================\n BUG: KASAN: slab-out-of-bounds in fpu_copy_uabi_to_guest_fpstate+0x86/0x130\n Read of size 8 at addr ffff888011e33a00 by task qemu-build/681\n CPU: 1 PID: 681 Comm: qemu-build Not tainted 5.18.0-rc5-KASAN-amd64 #1\n Hardware name: /DG35EC, BIOS ECG3510M.86A.0118.2010.0113.1426 01/13/2010\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x34/0x45\n print_report.cold+0x45/0x575\n kasan_report+0x9b/0xd0\n fpu_copy_uabi_to_guest_fpstate+0x86/0x130\n kvm_arch_vcpu_ioctl+0x72a/0x1c50 [kvm]\n kvm_vcpu_ioctl+0x47f/0x7b0 [kvm]\n __x64_sys_ioctl+0x5de/0xc90\n do_syscall_64+0x31/0x50\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n \u003c/TASK\u003e\n Allocated by task 0:\n (stack is not available)\n The buggy address belongs to the object at ffff888011e33800\n which belongs to the cache kmalloc-512 of size 512\n The buggy address is located 0 bytes to the right of\n 512-byte region [ffff888011e33800, ffff888011e33a00)\n The buggy address belongs to the physical page:\n page:0000000089cd4adb refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e30\n head:0000000089cd4adb order:2 compound_mapcount:0 compound_pincount:0\n flags: 0x4000000000010200(slab|head|zone=1)\n raw: 4000000000010200 dead000000000100 dead000000000122 ffff888001041c80\n raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000\n page dumped because: kasan: bad access detected\n Memory state around the buggy address:\n ffff888011e33900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff888011e33980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n \u003effff888011e33a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ^\n ffff888011e33a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ffff888011e33b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ==================================================================\n Disabling lock debugging due to kernel taint",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49557",
"url": "https://www.suse.com/security/cve/CVE-2022-49557"
},
{
"category": "external",
"summary": "SUSE Bug 1238425 for CVE-2022-49557",
"url": "https://bugzilla.suse.com/1238425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49557"
},
{
"cve": "CVE-2022-49722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix memory corruption in VF driver\n\nDisable VF\u0027s RX/TX queues, when it\u0027s disabled. VF can have queues enabled,\nwhen it requests a reset. If PF driver assumes that VF is disabled,\nwhile VF still has queues configured, VF may unmap DMA resources.\nIn such scenario device still can map packets to memory, which ends up\nsilently corrupting it.\nPreviously, VF driver could experience memory corruption, which lead to\ncrash:\n[ 5119.170157] BUG: unable to handle kernel paging request at 00001b9780003237\n[ 5119.170166] PGD 0 P4D 0\n[ 5119.170173] Oops: 0002 [#1] PREEMPT_RT SMP PTI\n[ 5119.170181] CPU: 30 PID: 427592 Comm: kworker/u96:2 Kdump: loaded Tainted: G W I --------- - - 4.18.0-372.9.1.rt7.166.el8.x86_64 #1\n[ 5119.170189] Hardware name: Dell Inc. PowerEdge R740/014X06, BIOS 2.3.10 08/15/2019\n[ 5119.170193] Workqueue: iavf iavf_adminq_task [iavf]\n[ 5119.170219] RIP: 0010:__page_frag_cache_drain+0x5/0x30\n[ 5119.170238] Code: 0f 0f b6 77 51 85 f6 74 07 31 d2 e9 05 df ff ff e9 90 fe ff ff 48 8b 05 49 db 33 01 eb b4 0f 1f 80 00 00 00 00 0f 1f 44 00 00 \u003cf0\u003e 29 77 34 74 01 c3 48 8b 07 f6 c4 80 74 0f 0f b6 77 51 85 f6 74\n[ 5119.170244] RSP: 0018:ffffa43b0bdcfd78 EFLAGS: 00010282\n[ 5119.170250] RAX: ffffffff896b3e40 RBX: ffff8fb282524000 RCX: 0000000000000002\n[ 5119.170254] RDX: 0000000049000000 RSI: 0000000000000000 RDI: 00001b9780003203\n[ 5119.170259] RBP: ffff8fb248217b00 R08: 0000000000000022 R09: 0000000000000009\n[ 5119.170262] R10: 2b849d6300000000 R11: 0000000000000020 R12: 0000000000000000\n[ 5119.170265] R13: 0000000000001000 R14: 0000000000000009 R15: 0000000000000000\n[ 5119.170269] FS: 0000000000000000(0000) GS:ffff8fb1201c0000(0000) knlGS:0000000000000000\n[ 5119.170274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 5119.170279] CR2: 00001b9780003237 CR3: 00000008f3e1a003 CR4: 00000000007726e0\n[ 5119.170283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 5119.170286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 5119.170290] PKRU: 55555554\n[ 5119.170292] Call Trace:\n[ 5119.170298] iavf_clean_rx_ring+0xad/0x110 [iavf]\n[ 5119.170324] iavf_free_rx_resources+0xe/0x50 [iavf]\n[ 5119.170342] iavf_free_all_rx_resources.part.51+0x30/0x40 [iavf]\n[ 5119.170358] iavf_virtchnl_completion+0xd8a/0x15b0 [iavf]\n[ 5119.170377] ? iavf_clean_arq_element+0x210/0x280 [iavf]\n[ 5119.170397] iavf_adminq_task+0x126/0x2e0 [iavf]\n[ 5119.170416] process_one_work+0x18f/0x420\n[ 5119.170429] worker_thread+0x30/0x370\n[ 5119.170437] ? process_one_work+0x420/0x420\n[ 5119.170445] kthread+0x151/0x170\n[ 5119.170452] ? set_kthread_struct+0x40/0x40\n[ 5119.170460] ret_from_fork+0x35/0x40\n[ 5119.170477] Modules linked in: iavf sctp ip6_udp_tunnel udp_tunnel mlx4_en mlx4_core nfp tls vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM ipt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 nft_compat nft_counter nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache sunrpc intel_rapl_msr iTCO_wdt iTCO_vendor_support dell_smbios wmi_bmof dell_wmi_descriptor dcdbas kvm_intel kvm irqbypass intel_rapl_common isst_if_common skx_edac irdma nfit libnvdimm x86_pkg_temp_thermal i40e intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ib_uverbs rapl ipmi_ssif intel_cstate intel_uncore mei_me pcspkr acpi_ipmi ib_core mei lpc_ich i2c_i801 ipmi_si ipmi_devintf wmi ipmi_msghandler acpi_power_meter xfs libcrc32c sd_mod t10_pi sg mgag200 drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ice ahci drm libahci crc32c_intel libata tg3 megaraid_sas\n[ 5119.170613] i2c_algo_bit dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: iavf]\n[ 5119.170627] CR2: 00001b9780003237",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49722",
"url": "https://www.suse.com/security/cve/CVE-2022-49722"
},
{
"category": "external",
"summary": "SUSE Bug 1238301 for CVE-2022-49722",
"url": "https://bugzilla.suse.com/1238301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.26.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.26.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.26.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49722"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…