RHSA-2024:4928
Vulnerability from csaf_opensuse - Published: 2024-07-31 00:00 - Updated: 2026-09-20 11:41Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:4928.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:4928.
Patchnames: RHSA-2024:4928
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
important
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47459
Threats
Impact
moderate
References
57 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:4928.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:4928.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:4928",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_4928.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47459 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-48743 page",
"url": "https://www.suse.com/security/cve/CVE-2022-48743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52458 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52809 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26737 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26773 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26852 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26880 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26982 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27030 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27046 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35885 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35952 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36924 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36952 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38580 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38580/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:41:33Z",
"generator": {
"date": "2024-07-31T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:4928",
"initial_release_date": "2024-07-31T00:00:00Z",
"revision_history": [
{
"date": "2024-07-31T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:41:33Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-427.28.1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"product_id": "kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-427.28.1.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"product": {
"name": "bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"product_id": "bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.3.0-427.28.1.el9_4?arch=x86_64\u0026upstream=bpftool-0:7.3.0-427.28.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-427.28.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.28.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-427.28.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.28.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-427.28.1.el9_4?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-427.28.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "perf-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "perf-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-427.28.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.28.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-427.28.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.28.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-427.28.1.el9_4.x86_64",
"product": {
"name": "rv-0:5.14.0-427.28.1.el9_4.x86_64",
"product_id": "rv-0:5.14.0-427.28.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-427.28.1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.3.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64"
},
"product_reference": "bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-427.28.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "perf-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-427.28.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
},
"product_reference": "rv-0:5.14.0-427.28.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-47459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47459"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv\n\nIt will trigger UAF for rx_kref of j1939_priv as following.\n\n cpu0 cpu1\nj1939_sk_bind(socket0, ndev0, ...)\nj1939_netdev_start\n j1939_sk_bind(socket1, ndev0, ...)\n j1939_netdev_start\nj1939_priv_set\n j1939_priv_get_by_ndev_locked\nj1939_jsk_add\n.....\nj1939_netdev_stop\nkref_put_lock(\u0026priv-\u003erx_kref, ...)\n kref_get(\u0026priv-\u003erx_kref, ...)\n REFCOUNT_WARN(\"addition on 0;...\")\n\n====================================================\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 1 PID: 20874 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0\nRIP: 0010:refcount_warn_saturate+0x169/0x1e0\nCall Trace:\n j1939_netdev_start+0x68b/0x920\n j1939_sk_bind+0x426/0xeb0\n ? security_socket_bind+0x83/0xb0\n\nThe rx_kref\u0027s kref_get() and kref_put() should use j1939_netdev_lock to\nprotect.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47459",
"url": "https://www.suse.com/security/cve/CVE-2021-47459"
},
{
"category": "external",
"summary": "SUSE Bug 1225253 for CVE-2021-47459",
"url": "https://bugzilla.suse.com/1225253"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47459"
},
{
"cve": "CVE-2022-48743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-48743"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: amd-xgbe: Fix skb data length underflow\n\nThere will be BUG_ON() triggered in include/linux/skbuff.h leading to\nintermittent kernel panic, when the skb length underflow is detected.\n\nFix this by dropping the packet if such length underflows are seen\nbecause of inconsistencies in the hardware descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-48743",
"url": "https://www.suse.com/security/cve/CVE-2022-48743"
},
{
"category": "external",
"summary": "SUSE Bug 1226705 for CVE-2022-48743",
"url": "https://bugzilla.suse.com/1226705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-48743"
},
{
"cve": "CVE-2023-52458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52458"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: add check that partition length needs to be aligned with block size\n\nBefore calling add partition or resize partition, there is no check\non whether the length is aligned with the logical block size.\nIf the logical block size of the disk is larger than 512 bytes,\nthen the partition size maybe not the multiple of the logical block size,\nand when the last sector is read, bio_truncate() will adjust the bio size,\nresulting in an IO error if the size of the read command is smaller than\nthe logical block size.If integrity data is supported, this will also\nresult in a null pointer dereference when calling bio_integrity_free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52458",
"url": "https://www.suse.com/security/cve/CVE-2023-52458"
},
{
"category": "external",
"summary": "SUSE Bug 1220428 for CVE-2023-52458",
"url": "https://bugzilla.suse.com/1220428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52458"
},
{
"cve": "CVE-2023-52809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()\n\nfc_lport_ptp_setup() did not check the return value of fc_rport_create()\nwhich can return NULL and would cause a NULL pointer dereference. Address\nthis issue by checking return value of fc_rport_create() and log error\nmessage on fc_rport_create() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52809",
"url": "https://www.suse.com/security/cve/CVE-2023-52809"
},
{
"category": "external",
"summary": "SUSE Bug 1225556 for CVE-2023-52809",
"url": "https://bugzilla.suse.com/1225556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52809"
},
{
"cve": "CVE-2024-26737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26737"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel\n\nThe following race is possible between bpf_timer_cancel_and_free\nand bpf_timer_cancel. It will lead a UAF on the timer-\u003etimer.\n\nbpf_timer_cancel();\n\tspin_lock();\n\tt = timer-\u003etime;\n\tspin_unlock();\n\n\t\t\t\t\tbpf_timer_cancel_and_free();\n\t\t\t\t\t\tspin_lock();\n\t\t\t\t\t\tt = timer-\u003etimer;\n\t\t\t\t\t\ttimer-\u003etimer = NULL;\n\t\t\t\t\t\tspin_unlock();\n\t\t\t\t\t\thrtimer_cancel(\u0026t-\u003etimer);\n\t\t\t\t\t\tkfree(t);\n\n\t/* UAF on t */\n\thrtimer_cancel(\u0026t-\u003etimer);\n\nIn bpf_timer_cancel_and_free, this patch frees the timer-\u003etimer\nafter a rcu grace period. This requires a rcu_head addition\nto the \"struct bpf_hrtimer\". Another kfree(t) happens in bpf_timer_init,\nthis does not need a kfree_rcu because it is still under the\nspin_lock and timer-\u003etimer has not been visible by others yet.\n\nIn bpf_timer_cancel, rcu_read_lock() is added because this helper\ncan be used in a non rcu critical section context (e.g. from\na sleepable bpf prog). Other timer-\u003etimer usages in helpers.c\nhave been audited, bpf_timer_cancel() is the only place where\ntimer-\u003etimer is used outside of the spin_lock.\n\nAnother solution considered is to mark a t-\u003eflag in bpf_timer_cancel\nand clear it after hrtimer_cancel() is done. In bpf_timer_cancel_and_free,\nit busy waits for the flag to be cleared before kfree(t). This patch\ngoes with a straight forward solution and frees timer-\u003etimer after\na rcu grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26737",
"url": "https://www.suse.com/security/cve/CVE-2024-26737"
},
{
"category": "external",
"summary": "SUSE Bug 1222557 for CVE-2024-26737",
"url": "https://bugzilla.suse.com/1222557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26737"
},
{
"cve": "CVE-2024-26773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26773"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n\nDetermine if the group block bitmap is corrupted before using ac_b_ex in\next4_mb_try_best_found() to avoid allocating blocks from a group with a\ncorrupted block bitmap in the following concurrency and making the\nsituation worse.\n\next4_mb_regular_allocator\n ext4_lock_group(sb, group)\n ext4_mb_good_group\n // check if the group bbitmap is corrupted\n ext4_mb_complex_scan_group\n // Scan group gets ac_b_ex but doesn\u0027t use it\n ext4_unlock_group(sb, group)\n ext4_mark_group_bitmap_corrupted(group)\n // The block bitmap was corrupted during\n // the group unlock gap.\n ext4_mb_try_best_found\n ext4_lock_group(ac-\u003eac_sb, group)\n ext4_mb_use_best_found\n mb_mark_used\n // Allocating blocks in block bitmap corrupted group",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26773",
"url": "https://www.suse.com/security/cve/CVE-2024-26773"
},
{
"category": "external",
"summary": "SUSE Bug 1222618 for CVE-2024-26773",
"url": "https://bugzilla.suse.com/1222618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26773"
},
{
"cve": "CVE-2024-26852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26852"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: avoid possible UAF in ip6_route_mpath_notify()\n\nsyzbot found another use-after-free in ip6_route_mpath_notify() [1]\n\nCommit f7225172f25a (\"net/ipv6: prevent use after free in\nip6_route_mpath_notify\") was not able to fix the root cause.\n\nWe need to defer the fib6_info_release() calls after\nip6_route_mpath_notify(), in the cleanup phase.\n\n[1]\nBUG: KASAN: slab-use-after-free in rt6_fill_node+0x1460/0x1ac0\nRead of size 4 at addr ffff88809a07fc64 by task syz-executor.2/23037\n\nCPU: 0 PID: 23037 Comm: syz-executor.2 Not tainted 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x1e7/0x2e0 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x167/0x540 mm/kasan/report.c:488\n kasan_report+0x142/0x180 mm/kasan/report.c:601\n rt6_fill_node+0x1460/0x1ac0\n inet6_rt_notify+0x13b/0x290 net/ipv6/route.c:6184\n ip6_route_mpath_notify net/ipv6/route.c:5198 [inline]\n ip6_route_multipath_add net/ipv6/route.c:5404 [inline]\n inet6_rtm_newroute+0x1d0f/0x2300 net/ipv6/route.c:5517\n rtnetlink_rcv_msg+0x885/0x1040 net/core/rtnetlink.c:6597\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2543\n netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1367\n netlink_sendmsg+0xa3b/0xd70 net/netlink/af_netlink.c:1908\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n ____sys_sendmsg+0x525/0x7d0 net/socket.c:2584\n ___sys_sendmsg net/socket.c:2638 [inline]\n __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2667\n do_syscall_64+0xf9/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\nRIP: 0033:0x7f73dd87dda9\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f73de6550c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f73dd9ac050 RCX: 00007f73dd87dda9\nRDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005\nRBP: 00007f73dd8ca47a R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000006e R14: 00007f73dd9ac050 R15: 00007ffdbdeb7858\n \u003c/TASK\u003e\n\nAllocated by task 23037:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:372 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:389\n kasan_kmalloc include/linux/kasan.h:211 [inline]\n __do_kmalloc_node mm/slub.c:3981 [inline]\n __kmalloc+0x22e/0x490 mm/slub.c:3994\n kmalloc include/linux/slab.h:594 [inline]\n kzalloc include/linux/slab.h:711 [inline]\n fib6_info_alloc+0x2e/0xf0 net/ipv6/ip6_fib.c:155\n ip6_route_info_create+0x445/0x12b0 net/ipv6/route.c:3758\n ip6_route_multipath_add net/ipv6/route.c:5298 [inline]\n inet6_rtm_newroute+0x744/0x2300 net/ipv6/route.c:5517\n rtnetlink_rcv_msg+0x885/0x1040 net/core/rtnetlink.c:6597\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2543\n netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1367\n netlink_sendmsg+0xa3b/0xd70 net/netlink/af_netlink.c:1908\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n ____sys_sendmsg+0x525/0x7d0 net/socket.c:2584\n ___sys_sendmsg net/socket.c:2638 [inline]\n __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2667\n do_syscall_64+0xf9/0x240\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\n\nFreed by task 16:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x4e/0x60 mm/kasan/generic.c:640\n poison_slab_object+0xa6/0xe0 m\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26852",
"url": "https://www.suse.com/security/cve/CVE-2024-26852"
},
{
"category": "external",
"summary": "SUSE Bug 1223057 for CVE-2024-26852",
"url": "https://bugzilla.suse.com/1223057"
},
{
"category": "external",
"summary": "SUSE Bug 1223059 for CVE-2024-26852",
"url": "https://bugzilla.suse.com/1223059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26852"
},
{
"cve": "CVE-2024-26880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26880"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: call the resume method on internal suspend\n\nThere is this reported crash when experimenting with the lvm2 testsuite.\nThe list corruption is caused by the fact that the postsuspend and resume\nmethods were not paired correctly; there were two consecutive calls to the\norigin_postsuspend function. The second call attempts to remove the\n\"hash_list\" entry from a list, while it was already removed by the first\ncall.\n\nFix __dm_internal_resume so that it calls the preresume and resume\nmethods of the table\u0027s targets.\n\nIf a preresume method of some target fails, we are in a tricky situation.\nWe can\u0027t return an error because dm_internal_resume isn\u0027t supposed to\nreturn errors. We can\u0027t return success, because then the \"resume\" and\n\"postsuspend\" methods would not be paired correctly. So, we set the\nDMF_SUSPENDED flag and we fake normal suspend - it may confuse userspace\ntools, but it won\u0027t cause a kernel crash.\n\n------------[ cut here ]------------\nkernel BUG at lib/list_debug.c:56!\ninvalid opcode: 0000 [#1] PREEMPT SMP\nCPU: 1 PID: 8343 Comm: dmsetup Not tainted 6.8.0-rc6 #4\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\nRIP: 0010:__list_del_entry_valid_or_report+0x77/0xc0\n\u003csnip\u003e\nRSP: 0018:ffff8881b831bcc0 EFLAGS: 00010282\nRAX: 000000000000004e RBX: ffff888143b6eb80 RCX: 0000000000000000\nRDX: 0000000000000001 RSI: ffffffff819053d0 RDI: 00000000ffffffff\nRBP: ffff8881b83a3400 R08: 00000000fffeffff R09: 0000000000000058\nR10: 0000000000000000 R11: ffffffff81a24080 R12: 0000000000000001\nR13: ffff88814538e000 R14: ffff888143bc6dc0 R15: ffffffffa02e4bb0\nFS: 00000000f7c0f780(0000) GS:ffff8893f0a40000(0000) knlGS:0000000000000000\nCS: 0010 DS: 002b ES: 002b CR0: 0000000080050033\nCR2: 0000000057fb5000 CR3: 0000000143474000 CR4: 00000000000006b0\nCall Trace:\n \u003cTASK\u003e\n ? die+0x2d/0x80\n ? do_trap+0xeb/0xf0\n ? __list_del_entry_valid_or_report+0x77/0xc0\n ? do_error_trap+0x60/0x80\n ? __list_del_entry_valid_or_report+0x77/0xc0\n ? exc_invalid_op+0x49/0x60\n ? __list_del_entry_valid_or_report+0x77/0xc0\n ? asm_exc_invalid_op+0x16/0x20\n ? table_deps+0x1b0/0x1b0 [dm_mod]\n ? __list_del_entry_valid_or_report+0x77/0xc0\n origin_postsuspend+0x1a/0x50 [dm_snapshot]\n dm_table_postsuspend_targets+0x34/0x50 [dm_mod]\n dm_suspend+0xd8/0xf0 [dm_mod]\n dev_suspend+0x1f2/0x2f0 [dm_mod]\n ? table_deps+0x1b0/0x1b0 [dm_mod]\n ctl_ioctl+0x300/0x5f0 [dm_mod]\n dm_compat_ctl_ioctl+0x7/0x10 [dm_mod]\n __x64_compat_sys_ioctl+0x104/0x170\n do_syscall_64+0x184/0x1b0\n entry_SYSCALL_64_after_hwframe+0x46/0x4e\nRIP: 0033:0xf7e6aead\n\u003csnip\u003e\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26880",
"url": "https://www.suse.com/security/cve/CVE-2024-26880"
},
{
"category": "external",
"summary": "SUSE Bug 1223188 for CVE-2024-26880",
"url": "https://bugzilla.suse.com/1223188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26880"
},
{
"cve": "CVE-2024-26982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26982"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSquashfs: check the inode number is not the invalid value of zero\n\nSyskiller has produced an out of bounds access in fill_meta_index().\n\nThat out of bounds access is ultimately caused because the inode\nhas an inode number with the invalid value of zero, which was not checked.\n\nThe reason this causes the out of bounds access is due to following\nsequence of events:\n\n1. Fill_meta_index() is called to allocate (via empty_meta_index())\n and fill a metadata index. It however suffers a data read error\n and aborts, invalidating the newly returned empty metadata index.\n It does this by setting the inode number of the index to zero,\n which means unused (zero is not a valid inode number).\n\n2. When fill_meta_index() is subsequently called again on another\n read operation, locate_meta_index() returns the previous index\n because it matches the inode number of 0. Because this index\n has been returned it is expected to have been filled, and because\n it hasn\u0027t been, an out of bounds access is performed.\n\nThis patch adds a sanity check which checks that the inode number\nis not zero when the inode is created and returns -EINVAL if it is.\n\n[phillip@squashfs.org.uk: whitespace fix]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26982",
"url": "https://www.suse.com/security/cve/CVE-2024-26982"
},
{
"category": "external",
"summary": "SUSE Bug 1223634 for CVE-2024-26982",
"url": "https://bugzilla.suse.com/1223634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26982"
},
{
"cve": "CVE-2024-27030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27030"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Use separate handlers for interrupts\n\nFor PF to AF interrupt vector and VF to AF vector same\ninterrupt handler is registered which is causing race condition.\nWhen two interrupts are raised to two CPUs at same time\nthen two cores serve same event corrupting the data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27030",
"url": "https://www.suse.com/security/cve/CVE-2024-27030"
},
{
"category": "external",
"summary": "SUSE Bug 1223790 for CVE-2024-27030",
"url": "https://bugzilla.suse.com/1223790"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27030"
},
{
"cve": "CVE-2024-27046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27046"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfp: flower: handle acti_netdevs allocation failure\n\nThe kmalloc_array() in nfp_fl_lag_do_work() will return null, if\nthe physical memory has run out. As a result, if we dereference\nthe acti_netdevs, the null pointer dereference bugs will happen.\n\nThis patch adds a check to judge whether allocation failure occurs.\nIf it happens, the delayed work will be rescheduled and try again.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27046",
"url": "https://www.suse.com/security/cve/CVE-2024-27046"
},
{
"category": "external",
"summary": "SUSE Bug 1223827 for CVE-2024-27046",
"url": "https://bugzilla.suse.com/1223827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27046"
},
{
"cve": "CVE-2024-35857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: prevent possible NULL dereferences from icmp_build_probe()\n\nFirst problem is a double call to __in_dev_get_rcu(), because\nthe second one could return NULL.\n\nif (__in_dev_get_rcu(dev) \u0026\u0026 __in_dev_get_rcu(dev)-\u003eifa_list)\n\nSecond problem is a read from dev-\u003eip6_ptr with no NULL check:\n\nif (!list_empty(\u0026rcu_dereference(dev-\u003eip6_ptr)-\u003eaddr_list))\n\nUse the correct RCU API to fix these.\n\nv2: add missing include \u003cnet/addrconf.h\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35857",
"url": "https://www.suse.com/security/cve/CVE-2024-35857"
},
{
"category": "external",
"summary": "SUSE Bug 1224619 for CVE-2024-35857",
"url": "https://bugzilla.suse.com/1224619"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35857"
},
{
"cve": "CVE-2024-35885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35885"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxbf_gige: stop interface during shutdown\n\nThe mlxbf_gige driver intermittantly encounters a NULL pointer\nexception while the system is shutting down via \"reboot\" command.\nThe mlxbf_driver will experience an exception right after executing\nits shutdown() method. One example of this exception is:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000070\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\nuser pgtable: 4k pages, 48-bit VAs, pgdp=000000011d373000\n[0000000000000070] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 96000004 [#1] SMP\nCPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G S OE 5.15.0-bf.6.gef6992a #1\nHardware name: https://www.mellanox.com BlueField SoC/BlueField SoC, BIOS 4.0.2.12669 Apr 21 2023\npstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : mlxbf_gige_handle_tx_complete+0xc8/0x170 [mlxbf_gige]\nlr : mlxbf_gige_poll+0x54/0x160 [mlxbf_gige]\nsp : ffff8000080d3c10\nx29: ffff8000080d3c10 x28: ffffcce72cbb7000 x27: ffff8000080d3d58\nx26: ffff0000814e7340 x25: ffff331cd1a05000 x24: ffffcce72c4ea008\nx23: ffff0000814e4b40 x22: ffff0000814e4d10 x21: ffff0000814e4128\nx20: 0000000000000000 x19: ffff0000814e4a80 x18: ffffffffffffffff\nx17: 000000000000001c x16: ffffcce72b4553f4 x15: ffff80008805b8a7\nx14: 0000000000000000 x13: 0000000000000030 x12: 0101010101010101\nx11: 7f7f7f7f7f7f7f7f x10: c2ac898b17576267 x9 : ffffcce720fa5404\nx8 : ffff000080812138 x7 : 0000000000002e9a x6 : 0000000000000080\nx5 : ffff00008de3b000 x4 : 0000000000000000 x3 : 0000000000000001\nx2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000\nCall trace:\n mlxbf_gige_handle_tx_complete+0xc8/0x170 [mlxbf_gige]\n mlxbf_gige_poll+0x54/0x160 [mlxbf_gige]\n __napi_poll+0x40/0x1c8\n net_rx_action+0x314/0x3a0\n __do_softirq+0x128/0x334\n run_ksoftirqd+0x54/0x6c\n smpboot_thread_fn+0x14c/0x190\n kthread+0x10c/0x110\n ret_from_fork+0x10/0x20\nCode: 8b070000 f9000ea0 f95056c0 f86178a1 (b9407002)\n---[ end trace 7cc3941aa0d8e6a4 ]---\nKernel panic - not syncing: Oops: Fatal exception in interrupt\nKernel Offset: 0x4ce722520000 from 0xffff800008000000\nPHYS_OFFSET: 0x80000000\nCPU features: 0x000005c1,a3330e5a\nMemory Limit: none\n---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---\n\nDuring system shutdown, the mlxbf_gige driver\u0027s shutdown() is always executed.\nHowever, the driver\u0027s stop() method will only execute if networking interface\nconfiguration logic within the Linux distribution has been setup to do so.\n\nIf shutdown() executes but stop() does not execute, NAPI remains enabled\nand this can lead to an exception if NAPI is scheduled while the hardware\ninterface has only been partially deinitialized.\n\nThe networking interface managed by the mlxbf_gige driver must be properly\nstopped during system shutdown so that IFF_UP is cleared, the hardware\ninterface is put into a clean state, and NAPI is fully deinitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35885",
"url": "https://www.suse.com/security/cve/CVE-2024-35885"
},
{
"category": "external",
"summary": "SUSE Bug 1224519 for CVE-2024-35885",
"url": "https://bugzilla.suse.com/1224519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35885"
},
{
"cve": "CVE-2024-35907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxbf_gige: call request_irq() after NAPI initialized\n\nThe mlxbf_gige driver encounters a NULL pointer exception in\nmlxbf_gige_open() when kdump is enabled. The sequence to reproduce\nthe exception is as follows:\na) enable kdump\nb) trigger kdump via \"echo c \u003e /proc/sysrq-trigger\"\nc) kdump kernel executes\nd) kdump kernel loads mlxbf_gige module\ne) the mlxbf_gige module runs its open() as the\n the \"oob_net0\" interface is brought up\nf) mlxbf_gige module will experience an exception\n during its open(), something like:\n\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n Mem abort info:\n ESR = 0x0000000086000004\n EC = 0x21: IABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\n user pgtable: 4k pages, 48-bit VAs, pgdp=00000000e29a4000\n [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n Internal error: Oops: 0000000086000004 [#1] SMP\n CPU: 0 PID: 812 Comm: NetworkManager Tainted: G OE 5.15.0-1035-bluefield #37-Ubuntu\n Hardware name: https://www.mellanox.com BlueField-3 SmartNIC Main Card/BlueField-3 SmartNIC Main Card, BIOS 4.6.0.13024 Jan 19 2024\n pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : 0x0\n lr : __napi_poll+0x40/0x230\n sp : ffff800008003e00\n x29: ffff800008003e00 x28: 0000000000000000 x27: 00000000ffffffff\n x26: ffff000066027238 x25: ffff00007cedec00 x24: ffff800008003ec8\n x23: 000000000000012c x22: ffff800008003eb7 x21: 0000000000000000\n x20: 0000000000000001 x19: ffff000066027238 x18: 0000000000000000\n x17: ffff578fcb450000 x16: ffffa870b083c7c0 x15: 0000aaab010441d0\n x14: 0000000000000001 x13: 00726f7272655f65 x12: 6769675f6662786c\n x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa870b0842398\n x8 : 0000000000000004 x7 : fe5a48b9069706ea x6 : 17fdb11fc84ae0d2\n x5 : d94a82549d594f35 x4 : 0000000000000000 x3 : 0000000000400100\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000066027238\n Call trace:\n 0x0\n net_rx_action+0x178/0x360\n __do_softirq+0x15c/0x428\n __irq_exit_rcu+0xac/0xec\n irq_exit+0x18/0x2c\n handle_domain_irq+0x6c/0xa0\n gic_handle_irq+0xec/0x1b0\n call_on_irq_stack+0x20/0x2c\n do_interrupt_handler+0x5c/0x70\n el1_interrupt+0x30/0x50\n el1h_64_irq_handler+0x18/0x2c\n el1h_64_irq+0x7c/0x80\n __setup_irq+0x4c0/0x950\n request_threaded_irq+0xf4/0x1bc\n mlxbf_gige_request_irqs+0x68/0x110 [mlxbf_gige]\n mlxbf_gige_open+0x5c/0x170 [mlxbf_gige]\n __dev_open+0x100/0x220\n __dev_change_flags+0x16c/0x1f0\n dev_change_flags+0x2c/0x70\n do_setlink+0x220/0xa40\n __rtnl_newlink+0x56c/0x8a0\n rtnl_newlink+0x58/0x84\n rtnetlink_rcv_msg+0x138/0x3c4\n netlink_rcv_skb+0x64/0x130\n rtnetlink_rcv+0x20/0x30\n netlink_unicast+0x2ec/0x360\n netlink_sendmsg+0x278/0x490\n __sock_sendmsg+0x5c/0x6c\n ____sys_sendmsg+0x290/0x2d4\n ___sys_sendmsg+0x84/0xd0\n __sys_sendmsg+0x70/0xd0\n __arm64_sys_sendmsg+0x2c/0x40\n invoke_syscall+0x78/0x100\n el0_svc_common.constprop.0+0x54/0x184\n do_el0_svc+0x30/0xac\n el0_svc+0x48/0x160\n el0t_64_sync_handler+0xa4/0x12c\n el0t_64_sync+0x1a4/0x1a8\n Code: bad PC value\n ---[ end trace 7d1c3f3bf9d81885 ]---\n Kernel panic - not syncing: Oops: Fatal exception in interrupt\n Kernel Offset: 0x2870a7a00000 from 0xffff800008000000\n PHYS_OFFSET: 0x80000000\n CPU features: 0x0,000005c1,a3332a5a\n Memory Limit: none\n ---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---\n\nThe exception happens because there is a pending RX interrupt before the\ncall to request_irq(RX IRQ) executes. Then, the RX IRQ handler fires\nimmediately after this request_irq() completes. The\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35907",
"url": "https://www.suse.com/security/cve/CVE-2024-35907"
},
{
"category": "external",
"summary": "SUSE Bug 1224492 for CVE-2024-35907",
"url": "https://bugzilla.suse.com/1224492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35907"
},
{
"cve": "CVE-2024-35952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35952"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/ast: Fix soft lockup\n\nThere is a while-loop in ast_dp_set_on_off() that could lead to\ninfinite-loop. This is because the register, VGACRI-Dx, checked in\nthis API is a scratch register actually controlled by a MCU, named\nDPMCU, in BMC.\n\nThese scratch registers are protected by scu-lock. If suc-lock is not\noff, DPMCU can not update these registers and then host will have soft\nlockup due to never updated status.\n\nDPMCU is used to control DP and relative registers to handshake with\nhost\u0027s VGA driver. Even the most time-consuming task, DP\u0027s link\ntraining, is less than 100ms. 200ms should be enough.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35952",
"url": "https://www.suse.com/security/cve/CVE-2024-35952"
},
{
"category": "external",
"summary": "SUSE Bug 1224705 for CVE-2024-35952",
"url": "https://bugzilla.suse.com/1224705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35952"
},
{
"cve": "CVE-2024-36924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()\n\nlpfc_worker_wake_up() calls the lpfc_work_done() routine, which takes the\nhbalock. Thus, lpfc_worker_wake_up() should not be called while holding the\nhbalock to avoid potential deadlock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36924",
"url": "https://www.suse.com/security/cve/CVE-2024-36924"
},
{
"category": "external",
"summary": "SUSE Bug 1225820 for CVE-2024-36924",
"url": "https://bugzilla.suse.com/1225820"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36924"
},
{
"cve": "CVE-2024-36952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36952"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Move NPIV\u0027s transport unregistration to after resource clean up\n\nThere are cases after NPIV deletion where the fabric switch still believes\nthe NPIV is logged into the fabric. This occurs when a vport is\nunregistered before the Remove All DA_ID CT and LOGO ELS are sent to the\nfabric.\n\nCurrently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including\nthe fabric D_ID, removes the last ndlp reference and frees the ndlp rport\nobject. This sometimes causes the race condition where the final DA_ID and\nLOGO are skipped from being sent to the fabric switch.\n\nFix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID\nand LOGO are sent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36952",
"url": "https://www.suse.com/security/cve/CVE-2024-36952"
},
{
"category": "external",
"summary": "SUSE Bug 1225898 for CVE-2024-36952",
"url": "https://bugzilla.suse.com/1225898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36952"
},
{
"cve": "CVE-2024-38580",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38580"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nepoll: be better about file lifetimes\n\nepoll can call out to vfs_poll() with a file pointer that may race with\nthe last \u0027fput()\u0027. That would make f_count go down to zero, and while\nthe ep-\u003emtx locking means that the resulting file pointer tear-down will\nbe blocked until the poll returns, it means that f_count is already\ndead, and any use of it won\u0027t actually get a reference to the file any\nmore: it\u0027s dead regardless.\n\nMake sure we have a valid ref on the file pointer before we call down to\nvfs_poll() from the epoll routines.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38580",
"url": "https://www.suse.com/security/cve/CVE-2024-38580"
},
{
"category": "external",
"summary": "SUSE Bug 1226610 for CVE-2024-38580",
"url": "https://bugzilla.suse.com/1226610"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.28.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.28.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.28.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38580"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…