RHSA-2024:10939
Vulnerability from csaf_opensuse - Published: 2024-12-11 00:00 - Updated: 2026-09-20 11:36Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:10939.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:10939.
Patchnames: RHSA-2024:10939
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-26615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-26615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-26615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-26615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-26615
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
30 products, the same list as for
CVE-2024-26615
Threats
Impact
moderate
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:10939.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:10939.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:10939",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_10939.json"
},
{
"category": "self",
"summary": "URL for RHSA-2024:10939",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-December/000654.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2024:10939",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-December/000654.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44994 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46695 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49949 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50251 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50251/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:36:13Z",
"generator": {
"date": "2024-12-11T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:10939",
"initial_release_date": "2024-12-11T00:00:00Z",
"revision_history": [
{
"date": "2024-12-11T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:36:13Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-503.16.1.el9_5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"product_id": "kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-503.16.1.el9_5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"product": {
"name": "bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"product_id": "bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.4.0-503.16.1.el9_5?arch=x86_64\u0026upstream=bpftool-0:7.4.0-503.16.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-503.16.1.el9_5?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-503.16.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-503.16.1.el9_5?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-503.16.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-503.16.1.el9_5?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-503.16.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt-addons@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "perf-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "perf-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-503.16.1.el9_5?arch=x86_64\u0026upstream=perf-0:5.14.0-503.16.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-503.16.1.el9_5?arch=x86_64\u0026upstream=perf-0:5.14.0-503.16.1.el9_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-503.16.1.el9_5.x86_64",
"product": {
"name": "rv-0:5.14.0-503.16.1.el9_5.x86_64",
"product_id": "rv-0:5.14.0-503.16.1.el9_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-503.16.1.el9_5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.4.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64"
},
"product_reference": "bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-503.16.1.el9_5.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "perf-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-503.16.1.el9_5.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
},
"product_reference": "rv-0:5.14.0-503.16.1.el9_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-26615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix illegal rmb_desc access in SMC-D connection dump\n\nA crash was found when dumping SMC-D connections. It can be reproduced\nby following steps:\n\n- run nginx/wrk test:\n smc_run nginx\n smc_run wrk -t 16 -c 1000 -d \u003cduration\u003e -H \u0027Connection: Close\u0027 \u003cURL\u003e\n\n- continuously dump SMC-D connections in parallel:\n watch -n 1 \u0027smcss -D\u0027\n\n BUG: kernel NULL pointer dereference, address: 0000000000000030\n CPU: 2 PID: 7204 Comm: smcss Kdump: loaded Tainted: G\tE 6.7.0+ #55\n RIP: 0010:__smc_diag_dump.constprop.0+0x5e5/0x620 [smc_diag]\n Call Trace:\n \u003cTASK\u003e\n ? __die+0x24/0x70\n ? page_fault_oops+0x66/0x150\n ? exc_page_fault+0x69/0x140\n ? asm_exc_page_fault+0x26/0x30\n ? __smc_diag_dump.constprop.0+0x5e5/0x620 [smc_diag]\n ? __kmalloc_node_track_caller+0x35d/0x430\n ? __alloc_skb+0x77/0x170\n smc_diag_dump_proto+0xd0/0xf0 [smc_diag]\n smc_diag_dump+0x26/0x60 [smc_diag]\n netlink_dump+0x19f/0x320\n __netlink_dump_start+0x1dc/0x300\n smc_diag_handler_dump+0x6a/0x80 [smc_diag]\n ? __pfx_smc_diag_dump+0x10/0x10 [smc_diag]\n sock_diag_rcv_msg+0x121/0x140\n ? __pfx_sock_diag_rcv_msg+0x10/0x10\n netlink_rcv_skb+0x5a/0x110\n sock_diag_rcv+0x28/0x40\n netlink_unicast+0x22a/0x330\n netlink_sendmsg+0x1f8/0x420\n __sock_sendmsg+0xb0/0xc0\n ____sys_sendmsg+0x24e/0x300\n ? copy_msghdr_from_user+0x62/0x80\n ___sys_sendmsg+0x7c/0xd0\n ? __do_fault+0x34/0x160\n ? do_read_fault+0x5f/0x100\n ? do_fault+0xb0/0x110\n ? __handle_mm_fault+0x2b0/0x6c0\n __sys_sendmsg+0x4d/0x80\n do_syscall_64+0x69/0x180\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nIt is possible that the connection is in process of being established\nwhen we dump it. Assumed that the connection has been registered in a\nlink group by smc_conn_create() but the rmb_desc has not yet been\ninitialized by smc_buf_create(), thus causing the illegal access to\nconn-\u003ermb_desc. So fix it by checking before dump.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26615",
"url": "https://www.suse.com/security/cve/CVE-2024-26615"
},
{
"category": "external",
"summary": "SUSE Bug 1220942 for CVE-2024-26615",
"url": "https://bugzilla.suse.com/1220942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26615"
},
{
"cve": "CVE-2024-43854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: initialize integrity buffer to zero before writing it to media\n\nMetadata added by bio_integrity_prep is using plain kmalloc, which leads\nto random kernel memory being written media. For PI metadata this is\nlimited to the app tag that isn\u0027t used by kernel generated metadata,\nbut for non-PI metadata the entire buffer leaks kernel memory.\n\nFix this by adding the __GFP_ZERO flag to allocations for writes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43854",
"url": "https://www.suse.com/security/cve/CVE-2024-43854"
},
{
"category": "external",
"summary": "SUSE Bug 1229345 for CVE-2024-43854",
"url": "https://bugzilla.suse.com/1229345"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-43854"
},
{
"cve": "CVE-2024-44994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44994"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu: Restore lost return in iommu_report_device_fault()\n\nWhen iommu_report_device_fault gets called with a partial fault it is\nsupposed to collect the fault into the group and then return.\n\nInstead the return was accidently deleted which results in trying to\nprocess the fault and an eventual crash.\n\nDeleting the return was a typo, put it back.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44994",
"url": "https://www.suse.com/security/cve/CVE-2024-44994"
},
{
"category": "external",
"summary": "SUSE Bug 1230198 for CVE-2024-44994",
"url": "https://bugzilla.suse.com/1230198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-44994"
},
{
"cve": "CVE-2024-45018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45018"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: flowtable: initialise extack before use\n\nFix missing initialisation of extack in flow offload.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45018",
"url": "https://www.suse.com/security/cve/CVE-2024-45018"
},
{
"category": "external",
"summary": "SUSE Bug 1230431 for CVE-2024-45018",
"url": "https://bugzilla.suse.com/1230431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-45018"
},
{
"cve": "CVE-2024-46695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46695"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux,smack: don\u0027t bypass permissions check in inode_setsecctx hook\n\nMarek Gresko reports that the root user on an NFS client is able to\nchange the security labels on files on an NFS filesystem that is\nexported with root squashing enabled.\n\nThe end of the kerneldoc comment for __vfs_setxattr_noperm() states:\n\n * This function requires the caller to lock the inode\u0027s i_mutex before it\n * is executed. It also assumes that the caller will make the appropriate\n * permission checks.\n\nnfsd_setattr() does do permissions checking via fh_verify() and\nnfsd_permission(), but those don\u0027t do all the same permissions checks\nthat are done by security_inode_setxattr() and its related LSM hooks do.\n\nSince nfsd_setattr() is the only consumer of security_inode_setsecctx(),\nsimplest solution appears to be to replace the call to\n__vfs_setxattr_noperm() with a call to __vfs_setxattr_locked(). This\nfixes the above issue and has the added benefit of causing nfsd to\nrecall conflicting delegations on a file when a client tries to change\nits security label.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46695",
"url": "https://www.suse.com/security/cve/CVE-2024-46695"
},
{
"category": "external",
"summary": "SUSE Bug 1230519 for CVE-2024-46695",
"url": "https://bugzilla.suse.com/1230519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-46695"
},
{
"cve": "CVE-2024-49949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49949"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential underflow in qdisc_pkt_len_init() with UFO\n\nAfter commit 7c6d2ecbda83 (\"net: be more gentle about silly gso\nrequests coming from user\") virtio_net_hdr_to_skb() had sanity check\nto detect malicious attempts from user space to cook a bad GSO packet.\n\nThen commit cf9acc90c80ec (\"net: virtio_net_hdr_to_skb: count\ntransport header in UFO\") while fixing one issue, allowed user space\nto cook a GSO packet with the following characteristic :\n\nIPv4 SKB_GSO_UDP, gso_size=3, skb-\u003elen = 28.\n\nWhen this packet arrives in qdisc_pkt_len_init(), we end up\nwith hdr_len = 28 (IPv4 header + UDP header), matching skb-\u003elen\n\nThen the following sets gso_segs to 0 :\n\ngso_segs = DIV_ROUND_UP(skb-\u003elen - hdr_len,\n shinfo-\u003egso_size);\n\nThen later we set qdisc_skb_cb(skb)-\u003epkt_len to back to zero :/\n\nqdisc_skb_cb(skb)-\u003epkt_len += (gso_segs - 1) * hdr_len;\n\nThis leads to the following crash in fq_codel [1]\n\nqdisc_pkt_len_init() is best effort, we only want an estimation\nof the bytes sent on the wire, not crashing the kernel.\n\nThis patch is fixing this particular issue, a following one\nadds more sanity checks for another potential bug.\n\n[1]\n[ 70.724101] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[ 70.724561] #PF: supervisor read access in kernel mode\n[ 70.724561] #PF: error_code(0x0000) - not-present page\n[ 70.724561] PGD 10ac61067 P4D 10ac61067 PUD 107ee2067 PMD 0\n[ 70.724561] Oops: Oops: 0000 [#1] SMP NOPTI\n[ 70.724561] CPU: 11 UID: 0 PID: 2163 Comm: b358537762 Not tainted 6.11.0-virtme #991\n[ 70.724561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 70.724561] RIP: 0010:fq_codel_enqueue (net/sched/sch_fq_codel.c:120 net/sched/sch_fq_codel.c:168 net/sched/sch_fq_codel.c:230) sch_fq_codel\n[ 70.724561] Code: 24 08 49 c1 e1 06 44 89 7c 24 18 45 31 ed 45 31 c0 31 ff 89 44 24 14 4c 03 8b 90 01 00 00 eb 04 39 ca 73 37 4d 8b 39 83 c7 01 \u003c49\u003e 8b 17 49 89 11 41 8b 57 28 45 8b 5f 34 49 c7 07 00 00 00 00 49\nAll code\n========\n 0:\t24 08 \tand $0x8,%al\n 2:\t49 c1 e1 06 \tshl $0x6,%r9\n 6:\t44 89 7c 24 18 \tmov %r15d,0x18(%rsp)\n b:\t45 31 ed \txor %r13d,%r13d\n e:\t45 31 c0 \txor %r8d,%r8d\n 11:\t31 ff \txor %edi,%edi\n 13:\t89 44 24 14 \tmov %eax,0x14(%rsp)\n 17:\t4c 03 8b 90 01 00 00 \tadd 0x190(%rbx),%r9\n 1e:\teb 04 \tjmp 0x24\n 20:\t39 ca \tcmp %ecx,%edx\n 22:\t73 37 \tjae 0x5b\n 24:\t4d 8b 39 \tmov (%r9),%r15\n 27:\t83 c7 01 \tadd $0x1,%edi\n 2a:*\t49 8b 17 \tmov (%r15),%rdx\t\t\u003c-- trapping instruction\n 2d:\t49 89 11 \tmov %rdx,(%r9)\n 30:\t41 8b 57 28 \tmov 0x28(%r15),%edx\n 34:\t45 8b 5f 34 \tmov 0x34(%r15),%r11d\n 38:\t49 c7 07 00 00 00 00 \tmovq $0x0,(%r15)\n 3f:\t49 \trex.WB\n\nCode starting with the faulting instruction\n===========================================\n 0:\t49 8b 17 \tmov (%r15),%rdx\n 3:\t49 89 11 \tmov %rdx,(%r9)\n 6:\t41 8b 57 28 \tmov 0x28(%r15),%edx\n a:\t45 8b 5f 34 \tmov 0x34(%r15),%r11d\n e:\t49 c7 07 00 00 00 00 \tmovq $0x0,(%r15)\n 15:\t49 \trex.WB\n[ 70.724561] RSP: 0018:ffff95ae85e6fb90 EFLAGS: 00000202\n[ 70.724561] RAX: 0000000002000000 RBX: ffff95ae841de000 RCX: 0000000000000000\n[ 70.724561] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001\n[ 70.724561] RBP: ffff95ae85e6fbf8 R08: 0000000000000000 R09: ffff95b710a30000\n[ 70.724561] R10: 0000000000000000 R11: bdf289445ce31881 R12: ffff95ae85e6fc58\n[ 70.724561] R13: 0000000000000000 R14: 0000000000000040 R15: 0000000000000000\n[ 70.724561] FS: 000000002c5c1380(0000) GS:ffff95bd7fcc0000(0000) knlGS:0000000000000000\n[ 70.724561] CS: 0010 DS: 0000 ES: 0000 C\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49949",
"url": "https://www.suse.com/security/cve/CVE-2024-49949"
},
{
"category": "external",
"summary": "SUSE Bug 1232160 for CVE-2024-49949",
"url": "https://bugzilla.suse.com/1232160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-49949"
},
{
"cve": "CVE-2024-50251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50251"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_payload: sanitize offset and length before calling skb_checksum()\n\nIf access to offset + length is larger than the skbuff length, then\nskb_checksum() triggers BUG_ON().\n\nskb_checksum() internally subtracts the length parameter while iterating\nover skbuff, BUG_ON(len) at the end of it checks that the expected\nlength to be included in the checksum calculation is fully consumed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50251",
"url": "https://www.suse.com/security/cve/CVE-2024-50251"
},
{
"category": "external",
"summary": "SUSE Bug 1233248 for CVE-2024-50251",
"url": "https://bugzilla.suse.com/1233248"
},
{
"category": "external",
"summary": "SUSE Bug 1237479 for CVE-2024-50251",
"url": "https://bugzilla.suse.com/1237479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.4.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-503.16.1.el9_5.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-503.16.1.el9_5.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-503.16.1.el9_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-50251"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…