RHSA-2024:5363
Vulnerability from csaf_opensuse - Published: 2024-08-14 00:00 - Updated: 2026-09-20 11:41Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:5363.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:5363.
Patchnames: RHSA-2024:5363
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
7.3 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
low
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2021-47606
Threats
Impact
moderate
References
150 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:5363.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:5363.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:5363",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_5363.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47606 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52651 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52796 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52864 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21823 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26808 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26853 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26868 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27049 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27052 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27065 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27417 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27434 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-33621 page",
"url": "https://www.suse.com/security/cve/CVE-2024-33621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35789 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35800 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35823 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35845 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35848 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35852 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35937 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35969 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36005 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36017 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36020 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36489 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36921 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36941 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36971 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-37353 page",
"url": "https://www.suse.com/security/cve/CVE-2024-37353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-37356 page",
"url": "https://www.suse.com/security/cve/CVE-2024-37356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38391 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39487 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39487/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40928 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40954 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40958 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40961 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40961/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:41:55Z",
"generator": {
"date": "2024-08-14T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:5363",
"initial_release_date": "2024-08-14T00:00:00Z",
"revision_history": [
{
"date": "2024-08-14T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:41:55Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-427.31.1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"product_id": "kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-427.31.1.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"product": {
"name": "bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"product_id": "bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.3.0-427.31.1.el9_4?arch=x86_64\u0026upstream=bpftool-0:7.3.0-427.31.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-427.31.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.31.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-427.31.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.31.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-427.31.1.el9_4?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-427.31.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "perf-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "perf-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-427.31.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.31.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-427.31.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.31.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-427.31.1.el9_4.x86_64",
"product": {
"name": "rv-0:5.14.0-427.31.1.el9_4.x86_64",
"product_id": "rv-0:5.14.0-427.31.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-427.31.1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.3.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64"
},
"product_reference": "bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-427.31.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "perf-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-427.31.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
},
"product_reference": "rv-0:5.14.0-427.31.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-47606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netlink: af_netlink: Prevent empty skb by adding a check on len.\n\nAdding a check on len parameter to avoid empty skb. This prevents a\ndivision error in netem_enqueue function which is caused when skb-\u003elen=0\nand skb-\u003edata_len=0 in the randomized corruption step as shown below.\n\nskb-\u003edata[prandom_u32() % skb_headlen(skb)] ^= 1\u003c\u003c(prandom_u32() % 8);\n\nCrash Report:\n[ 343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family\n0 port 6081 - 0\n[ 343.216110] netem: version 1.3\n[ 343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI\n[ 343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+\n[ 343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\nBIOS 1.11.0-2.el7 04/01/2014\n[ 343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem]\n[ 343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff\nff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f\n74 \u003cf7\u003e f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03\n[ 343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246\n[ 343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX:\n0000000000000000\n[ 343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI:\nffff88800f8eda40\n[ 343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09:\nffffffff94fb8445\n[ 343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12:\n0000000000000000\n[ 343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15:\n0000000000000020\n[ 343.247291] FS: 00007fdde2bd7700(0000) GS:ffff888109780000(0000)\nknlGS:0000000000000000\n[ 343.248350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4:\n00000000000006e0\n[ 343.250076] Call Trace:\n[ 343.250423] \u003cTASK\u003e\n[ 343.250713] ? memcpy+0x4d/0x60\n[ 343.251162] ? netem_init+0xa0/0xa0 [sch_netem]\n[ 343.251795] ? __sanitizer_cov_trace_pc+0x21/0x60\n[ 343.252443] netem_enqueue+0xe28/0x33c0 [sch_netem]\n[ 343.253102] ? stack_trace_save+0x87/0xb0\n[ 343.253655] ? filter_irq_stacks+0xb0/0xb0\n[ 343.254220] ? netem_init+0xa0/0xa0 [sch_netem]\n[ 343.254837] ? __kasan_check_write+0x14/0x20\n[ 343.255418] ? _raw_spin_lock+0x88/0xd6\n[ 343.255953] dev_qdisc_enqueue+0x50/0x180\n[ 343.256508] __dev_queue_xmit+0x1a7e/0x3090\n[ 343.257083] ? netdev_core_pick_tx+0x300/0x300\n[ 343.257690] ? check_kcov_mode+0x10/0x40\n[ 343.258219] ? _raw_spin_unlock_irqrestore+0x29/0x40\n[ 343.258899] ? __kasan_init_slab_obj+0x24/0x30\n[ 343.259529] ? setup_object.isra.71+0x23/0x90\n[ 343.260121] ? new_slab+0x26e/0x4b0\n[ 343.260609] ? kasan_poison+0x3a/0x50\n[ 343.261118] ? kasan_unpoison+0x28/0x50\n[ 343.261637] ? __kasan_slab_alloc+0x71/0x90\n[ 343.262214] ? memcpy+0x4d/0x60\n[ 343.262674] ? write_comp_data+0x2f/0x90\n[ 343.263209] ? __kasan_check_write+0x14/0x20\n[ 343.263802] ? __skb_clone+0x5d6/0x840\n[ 343.264329] ? __sanitizer_cov_trace_pc+0x21/0x60\n[ 343.264958] dev_queue_xmit+0x1c/0x20\n[ 343.265470] netlink_deliver_tap+0x652/0x9c0\n[ 343.266067] netlink_unicast+0x5a0/0x7f0\n[ 343.266608] ? netlink_attachskb+0x860/0x860\n[ 343.267183] ? __sanitizer_cov_trace_pc+0x21/0x60\n[ 343.267820] ? write_comp_data+0x2f/0x90\n[ 343.268367] netlink_sendmsg+0x922/0xe80\n[ 343.268899] ? netlink_unicast+0x7f0/0x7f0\n[ 343.269472] ? __sanitizer_cov_trace_pc+0x21/0x60\n[ 343.270099] ? write_comp_data+0x2f/0x90\n[ 343.270644] ? netlink_unicast+0x7f0/0x7f0\n[ 343.271210] sock_sendmsg+0x155/0x190\n[ 343.271721] ____sys_sendmsg+0x75f/0x8f0\n[ 343.272262] ? kernel_sendmsg+0x60/0x60\n[ 343.272788] ? write_comp_data+0x2f/0x90\n[ 343.273332] ? write_comp_data+0x2f/0x90\n[ 343.273869] ___sys_sendmsg+0x10f/0x190\n[ 343.274405] ? sendmsg_copy_msghdr+0x80/0x80\n[ 343.274984] ? slab_post_alloc_hook+0x70/0x230\n[ 343.275597] ? futex_wait_setup+0x240/0x240\n[ 343.276175] ? security_file_alloc+0x3e/0x170\n[ 343.276779] ? write_comp_d\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47606",
"url": "https://www.suse.com/security/cve/CVE-2021-47606"
},
{
"category": "external",
"summary": "SUSE Bug 1226555 for CVE-2021-47606",
"url": "https://bugzilla.suse.com/1226555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47606"
},
{
"cve": "CVE-2023-52651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52651"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52651",
"url": "https://www.suse.com/security/cve/CVE-2023-52651"
},
{
"category": "external",
"summary": "SUSE Bug 1230621 for CVE-2023-52651",
"url": "https://bugzilla.suse.com/1230621"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52651"
},
{
"cve": "CVE-2023-52796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52796"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: add ipvlan_route_v6_outbound() helper\n\nInspired by syzbot reports using a stack of multiple ipvlan devices.\n\nReduce stack size needed in ipvlan_process_v6_outbound() by moving\nthe flowi6 struct used for the route lookup in an non inlined\nhelper. ipvlan_route_v6_outbound() needs 120 bytes on the stack,\nimmediately reclaimed.\n\nAlso make sure ipvlan_process_v4_outbound() is not inlined.\n\nWe might also have to lower MAX_NEST_DEV, because only syzbot uses\nsetups with more than four stacked devices.\n\nBUG: TASK stack guard page was hit at ffffc9000e803ff8 (stack is ffffc9000e804000..ffffc9000e808000)\nstack guard page: 0000 [#1] SMP KASAN\nCPU: 0 PID: 13442 Comm: syz-executor.4 Not tainted 6.1.52-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023\nRIP: 0010:kasan_check_range+0x4/0x2a0 mm/kasan/generic.c:188\nCode: 48 01 c6 48 89 c7 e8 db 4e c1 03 31 c0 5d c3 cc 0f 0b eb 02 0f 0b b8 ea ff ff ff 5d c3 cc 00 00 cc cc 00 00 cc cc 55 48 89 e5 \u003c41\u003e 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 a4 01 00 00 48 89\nRSP: 0018:ffffc9000e804000 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817e5bf2\nRDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff887c6568\nRBP: ffffc9000e804000 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001d0080c\nR13: dffffc0000000000 R14: ffffffff87e6b100 R15: 0000000000000000\nFS: 00007fd0c55826c0(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffc9000e803ff8 CR3: 0000000170ef7000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\u003c#DF\u003e\n\u003c/#DF\u003e\n\u003cTASK\u003e\n[\u003cffffffff81f281d1\u003e] __kasan_check_read+0x11/0x20 mm/kasan/shadow.c:31\n[\u003cffffffff817e5bf2\u003e] instrument_atomic_read include/linux/instrumented.h:72 [inline]\n[\u003cffffffff817e5bf2\u003e] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]\n[\u003cffffffff817e5bf2\u003e] cpumask_test_cpu include/linux/cpumask.h:506 [inline]\n[\u003cffffffff817e5bf2\u003e] cpu_online include/linux/cpumask.h:1092 [inline]\n[\u003cffffffff817e5bf2\u003e] trace_lock_acquire include/trace/events/lock.h:24 [inline]\n[\u003cffffffff817e5bf2\u003e] lock_acquire+0xe2/0x590 kernel/locking/lockdep.c:5632\n[\u003cffffffff8563221e\u003e] rcu_lock_acquire+0x2e/0x40 include/linux/rcupdate.h:306\n[\u003cffffffff8561464d\u003e] rcu_read_lock include/linux/rcupdate.h:747 [inline]\n[\u003cffffffff8561464d\u003e] ip6_pol_route+0x15d/0x1440 net/ipv6/route.c:2221\n[\u003cffffffff85618120\u003e] ip6_pol_route_output+0x50/0x80 net/ipv6/route.c:2606\n[\u003cffffffff856f65b5\u003e] pol_lookup_func include/net/ip6_fib.h:584 [inline]\n[\u003cffffffff856f65b5\u003e] fib6_rule_lookup+0x265/0x620 net/ipv6/fib6_rules.c:116\n[\u003cffffffff85618009\u003e] ip6_route_output_flags_noref+0x2d9/0x3a0 net/ipv6/route.c:2638\n[\u003cffffffff8561821a\u003e] ip6_route_output_flags+0xca/0x340 net/ipv6/route.c:2651\n[\u003cffffffff838bd5a3\u003e] ip6_route_output include/net/ip6_route.h:100 [inline]\n[\u003cffffffff838bd5a3\u003e] ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:473 [inline]\n[\u003cffffffff838bd5a3\u003e] ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:529 [inline]\n[\u003cffffffff838bd5a3\u003e] ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:602 [inline]\n[\u003cffffffff838bd5a3\u003e] ipvlan_queue_xmit+0xc33/0x1be0 drivers/net/ipvlan/ipvlan_core.c:677\n[\u003cffffffff838c2909\u003e] ipvlan_start_xmit+0x49/0x100 drivers/net/ipvlan/ipvlan_main.c:229\n[\u003cffffffff84d03900\u003e] netdev_start_xmit include/linux/netdevice.h:4966 [inline]\n[\u003cffffffff84d03900\u003e] xmit_one net/core/dev.c:3644 [inline]\n[\u003cffffffff84d03900\u003e] dev_hard_start_xmit+0x320/0x980 net/core/dev.c:3660\n[\u003cffffffff84d080e2\u003e] __dev_queue_xmit+0x16b2/0x3370 net/core/dev.c:4324\n[\u003cffffffff855ce4cd\u003e] dev_queue_xmit include/linux/netdevice.h:3067 [inline]\n[\u003cffffffff855ce4cd\u003e] neigh_hh_output include/net/neighbour.h:529 [inline]\n[\u003cf\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52796",
"url": "https://www.suse.com/security/cve/CVE-2023-52796"
},
{
"category": "external",
"summary": "SUSE Bug 1224930 for CVE-2023-52796",
"url": "https://bugzilla.suse.com/1224930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52796"
},
{
"cve": "CVE-2023-52864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52864"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: wmi: Fix opening of char device\n\nSince commit fa1f68db6ca7 (\"drivers: misc: pass miscdevice pointer via\nfile private data\"), the miscdevice stores a pointer to itself inside\nfilp-\u003eprivate_data, which means that private_data will not be NULL when\nwmi_char_open() is called. This might cause memory corruption should\nwmi_char_open() be unable to find its driver, something which can\nhappen when the associated WMI device is deleted in wmi_free_devices().\n\nFix the problem by using the miscdevice pointer to retrieve the WMI\ndevice data associated with a char device using container_of(). This\nalso avoids wmi_char_open() picking a wrong WMI device bound to a\ndriver with the same name as the original driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52864",
"url": "https://www.suse.com/security/cve/CVE-2023-52864"
},
{
"category": "external",
"summary": "SUSE Bug 1225132 for CVE-2023-52864",
"url": "https://bugzilla.suse.com/1225132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52864"
},
{
"cve": "CVE-2024-21823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21823"
}
],
"notes": [
{
"category": "general",
"text": "Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21823",
"url": "https://www.suse.com/security/cve/CVE-2024-21823"
},
{
"category": "external",
"summary": "SUSE Bug 1223625 for CVE-2024-21823",
"url": "https://bugzilla.suse.com/1223625"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-21823"
},
{
"cve": "CVE-2024-26600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP\n\nIf the external phy working together with phy-omap-usb2 does not implement\nsend_srp(), we may still attempt to call it. This can happen on an idle\nEthernet gadget triggering a wakeup for example:\n\nconfigfs-gadget.g1 gadget.0: ECM Suspend\nconfigfs-gadget.g1 gadget.0: Port suspended. Triggering wakeup\n...\nUnable to handle kernel NULL pointer dereference at virtual address\n00000000 when execute\n...\nPC is at 0x0\nLR is at musb_gadget_wakeup+0x1d4/0x254 [musb_hdrc]\n...\nmusb_gadget_wakeup [musb_hdrc] from usb_gadget_wakeup+0x1c/0x3c [udc_core]\nusb_gadget_wakeup [udc_core] from eth_start_xmit+0x3b0/0x3d4 [u_ether]\neth_start_xmit [u_ether] from dev_hard_start_xmit+0x94/0x24c\ndev_hard_start_xmit from sch_direct_xmit+0x104/0x2e4\nsch_direct_xmit from __dev_queue_xmit+0x334/0xd88\n__dev_queue_xmit from arp_solicit+0xf0/0x268\narp_solicit from neigh_probe+0x54/0x7c\nneigh_probe from __neigh_event_send+0x22c/0x47c\n__neigh_event_send from neigh_resolve_output+0x14c/0x1c0\nneigh_resolve_output from ip_finish_output2+0x1c8/0x628\nip_finish_output2 from ip_send_skb+0x40/0xd8\nip_send_skb from udp_send_skb+0x124/0x340\nudp_send_skb from udp_sendmsg+0x780/0x984\nudp_sendmsg from __sys_sendto+0xd8/0x158\n__sys_sendto from ret_fast_syscall+0x0/0x58\n\nLet\u0027s fix the issue by checking for send_srp() and set_vbus() before\ncalling them. For USB peripheral only cases these both could be NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26600",
"url": "https://www.suse.com/security/cve/CVE-2024-26600"
},
{
"category": "external",
"summary": "SUSE Bug 1220340 for CVE-2024-26600",
"url": "https://bugzilla.suse.com/1220340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26600"
},
{
"cve": "CVE-2024-26808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26808"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain\n\nRemove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER\nevent is reported, otherwise a stale reference to netdevice remains in\nthe hook list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26808",
"url": "https://www.suse.com/security/cve/CVE-2024-26808"
},
{
"category": "external",
"summary": "SUSE Bug 1222634 for CVE-2024-26808",
"url": "https://bugzilla.suse.com/1222634"
},
{
"category": "external",
"summary": "SUSE Bug 1245772 for CVE-2024-26808",
"url": "https://bugzilla.suse.com/1245772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26808"
},
{
"cve": "CVE-2024-26828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix underflow in parse_server_interfaces()\n\nIn this loop, we step through the buffer and after each item we check\nif the size_left is greater than the minimum size we need. However,\nthe problem is that \"bytes_left\" is type ssize_t while sizeof() is type\nsize_t. That means that because of type promotion, the comparison is\ndone as an unsigned and if we have negative bytes left the loop\ncontinues instead of ending.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26828",
"url": "https://www.suse.com/security/cve/CVE-2024-26828"
},
{
"category": "external",
"summary": "SUSE Bug 1223084 for CVE-2024-26828",
"url": "https://bugzilla.suse.com/1223084"
},
{
"category": "external",
"summary": "SUSE Bug 1223363 for CVE-2024-26828",
"url": "https://bugzilla.suse.com/1223363"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26828"
},
{
"cve": "CVE-2024-26853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26853"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: avoid returning frame twice in XDP_REDIRECT\n\nWhen a frame can not be transmitted in XDP_REDIRECT\n(e.g. due to a full queue), it is necessary to free\nit by calling xdp_return_frame_rx_napi.\n\nHowever, this is the responsibility of the caller of\nthe ndo_xdp_xmit (see for example bq_xmit_all in\nkernel/bpf/devmap.c) and thus calling it inside\nigc_xdp_xmit (which is the ndo_xdp_xmit of the igc\ndriver) as well will lead to memory corruption.\n\nIn fact, bq_xmit_all expects that it can return all\nframes after the last successfully transmitted one.\nTherefore, break for the first not transmitted frame,\nbut do not call xdp_return_frame_rx_napi in igc_xdp_xmit.\nThis is equally implemented in other Intel drivers\nsuch as the igb.\n\nThere are two alternatives to this that were rejected:\n1. Return num_frames as all the frames would have been\n transmitted and release them inside igc_xdp_xmit.\n While it might work technically, it is not what\n the return value is meant to represent (i.e. the\n number of SUCCESSFULLY transmitted packets).\n2. Rework kernel/bpf/devmap.c and all drivers to\n support non-consecutively dropped packets.\n Besides being complex, it likely has a negative\n performance impact without a significant gain\n since it is anyway unlikely that the next frame\n can be transmitted if the previous one was dropped.\n\nThe memory corruption can be reproduced with\nthe following script which leads to a kernel panic\nafter a few seconds. It basically generates more\ntraffic than a i225 NIC can transmit and pushes it\nvia XDP_REDIRECT from a virtual interface to the\nphysical interface where frames get dropped.\n\n #!/bin/bash\n INTERFACE=enp4s0\n INTERFACE_IDX=`cat /sys/class/net/$INTERFACE/ifindex`\n\n sudo ip link add dev veth1 type veth peer name veth2\n sudo ip link set up $INTERFACE\n sudo ip link set up veth1\n sudo ip link set up veth2\n\n cat \u003c\u003c EOF \u003e redirect.bpf.c\n\n SEC(\"prog\")\n int redirect(struct xdp_md *ctx)\n {\n return bpf_redirect($INTERFACE_IDX, 0);\n }\n\n char _license[] SEC(\"license\") = \"GPL\";\n EOF\n clang -O2 -g -Wall -target bpf -c redirect.bpf.c -o redirect.bpf.o\n sudo ip link set veth2 xdp obj redirect.bpf.o\n\n cat \u003c\u003c EOF \u003e pass.bpf.c\n\n SEC(\"prog\")\n int pass(struct xdp_md *ctx)\n {\n return XDP_PASS;\n }\n\n char _license[] SEC(\"license\") = \"GPL\";\n EOF\n clang -O2 -g -Wall -target bpf -c pass.bpf.c -o pass.bpf.o\n sudo ip link set $INTERFACE xdp obj pass.bpf.o\n\n cat \u003c\u003c EOF \u003e trafgen.cfg\n\n {\n /* Ethernet Header */\n 0xe8, 0x6a, 0x64, 0x41, 0xbf, 0x46,\n 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,\n const16(ETH_P_IP),\n\n /* IPv4 Header */\n 0b01000101, 0, # IPv4 version, IHL, TOS\n const16(1028), # IPv4 total length (UDP length + 20 bytes (IP header))\n const16(2), # IPv4 ident\n 0b01000000, 0, # IPv4 flags, fragmentation off\n 64, # IPv4 TTL\n 17, # Protocol UDP\n csumip(14, 33), # IPv4 checksum\n\n /* UDP Header */\n 10, 0, 1, 1, # IP Src - adapt as needed\n 10, 0, 1, 2, # IP Dest - adapt as needed\n const16(6666), # UDP Src Port\n const16(6666), # UDP Dest Port\n const16(1008), # UDP length (UDP header 8 bytes + payload length)\n csumudp(14, 34), # UDP checksum\n\n /* Payload */\n fill(\u0027W\u0027, 1000),\n }\n EOF\n\n sudo trafgen -i trafgen.cfg -b3000MB -o veth1 --cpp",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26853",
"url": "https://www.suse.com/security/cve/CVE-2024-26853"
},
{
"category": "external",
"summary": "SUSE Bug 1223061 for CVE-2024-26853",
"url": "https://bugzilla.suse.com/1223061"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26853"
},
{
"cve": "CVE-2024-26868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26868"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: fix panic when nfs4_ff_layout_prepare_ds() fails\n\nWe\u0027ve been seeing the following panic in production\n\nBUG: kernel NULL pointer dereference, address: 0000000000000065\nPGD 2f485f067 P4D 2f485f067 PUD 2cc5d8067 PMD 0\nRIP: 0010:ff_layout_cancel_io+0x3a/0x90 [nfs_layout_flexfiles]\nCall Trace:\n \u003cTASK\u003e\n ? __die+0x78/0xc0\n ? page_fault_oops+0x286/0x380\n ? __rpc_execute+0x2c3/0x470 [sunrpc]\n ? rpc_new_task+0x42/0x1c0 [sunrpc]\n ? exc_page_fault+0x5d/0x110\n ? asm_exc_page_fault+0x22/0x30\n ? ff_layout_free_layoutreturn+0x110/0x110 [nfs_layout_flexfiles]\n ? ff_layout_cancel_io+0x3a/0x90 [nfs_layout_flexfiles]\n ? ff_layout_cancel_io+0x6f/0x90 [nfs_layout_flexfiles]\n pnfs_mark_matching_lsegs_return+0x1b0/0x360 [nfsv4]\n pnfs_error_mark_layout_for_return+0x9e/0x110 [nfsv4]\n ? ff_layout_send_layouterror+0x50/0x160 [nfs_layout_flexfiles]\n nfs4_ff_layout_prepare_ds+0x11f/0x290 [nfs_layout_flexfiles]\n ff_layout_pg_init_write+0xf0/0x1f0 [nfs_layout_flexfiles]\n __nfs_pageio_add_request+0x154/0x6c0 [nfs]\n nfs_pageio_add_request+0x26b/0x380 [nfs]\n nfs_do_writepage+0x111/0x1e0 [nfs]\n nfs_writepages_callback+0xf/0x30 [nfs]\n write_cache_pages+0x17f/0x380\n ? nfs_pageio_init_write+0x50/0x50 [nfs]\n ? nfs_writepages+0x6d/0x210 [nfs]\n ? nfs_writepages+0x6d/0x210 [nfs]\n nfs_writepages+0x125/0x210 [nfs]\n do_writepages+0x67/0x220\n ? generic_perform_write+0x14b/0x210\n filemap_fdatawrite_wbc+0x5b/0x80\n file_write_and_wait_range+0x6d/0xc0\n nfs_file_fsync+0x81/0x170 [nfs]\n ? nfs_file_mmap+0x60/0x60 [nfs]\n __x64_sys_fsync+0x53/0x90\n do_syscall_64+0x3d/0x90\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nInspecting the core with drgn I was able to pull this\n\n \u003e\u003e\u003e prog.crashed_thread().stack_trace()[0]\n #0 at 0xffffffffa079657a (ff_layout_cancel_io+0x3a/0x84) in ff_layout_cancel_io at fs/nfs/flexfilelayout/flexfilelayout.c:2021:27\n \u003e\u003e\u003e prog.crashed_thread().stack_trace()[0][\u0027idx\u0027]\n (u32)1\n \u003e\u003e\u003e prog.crashed_thread().stack_trace()[0][\u0027flseg\u0027].mirror_array[1].mirror_ds\n (struct nfs4_ff_layout_ds *)0xffffffffffffffed\n\nThis is clear from the stack trace, we call nfs4_ff_layout_prepare_ds()\nwhich could error out initializing the mirror_ds, and then we go to\nclean it all up and our check is only for if (!mirror-\u003emirror_ds). This\nis inconsistent with the rest of the users of mirror_ds, which have\n\n if (IS_ERR_OR_NULL(mirror_ds))\n\nto keep from tripping over this exact scenario. Fix this up in\nff_layout_cancel_io() to make sure we don\u0027t panic when we get an error.\nI also spot checked all the other instances of checking mirror_ds and we\nappear to be doing the correct checks everywhere, only unconditionally\ndereferencing mirror_ds when we know it would be valid.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26868",
"url": "https://www.suse.com/security/cve/CVE-2024-26868"
},
{
"category": "external",
"summary": "SUSE Bug 1223038 for CVE-2024-26868",
"url": "https://bugzilla.suse.com/1223038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26868"
},
{
"cve": "CVE-2024-26897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete\n\nThe ath9k_wmi_event_tasklet() used in ath9k_htc assumes that all the data\nstructures have been fully initialised by the time it runs. However, because of\nthe order in which things are initialised, this is not guaranteed to be the\ncase, because the device is exposed to the USB subsystem before the ath9k driver\ninitialisation is completed.\n\nWe already committed a partial fix for this in commit:\n8b3046abc99e (\"ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()\")\n\nHowever, that commit only aborted the WMI_TXSTATUS_EVENTID command in the event\ntasklet, pairing it with an \"initialisation complete\" bit in the TX struct. It\nseems syzbot managed to trigger the race for one of the other commands as well,\nso let\u0027s just move the existing synchronisation bit to cover the whole\ntasklet (setting it at the end of ath9k_htc_probe_device() instead of inside\nath9k_tx_init()).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26897",
"url": "https://www.suse.com/security/cve/CVE-2024-26897"
},
{
"category": "external",
"summary": "SUSE Bug 1223323 for CVE-2024-26897",
"url": "https://bugzilla.suse.com/1223323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26897"
},
{
"cve": "CVE-2024-27049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27049"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925e: fix use-after-free in free_irq()\n\nFrom commit a304e1b82808 (\"[PATCH] Debug shared irqs\"), there is a test\nto make sure the shared irq handler should be able to handle the unexpected\nevent after deregistration. For this case, let\u0027s apply MT76_REMOVED flag to\nindicate the device was removed and do not run into the resource access\nanymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27049",
"url": "https://www.suse.com/security/cve/CVE-2024-27049"
},
{
"category": "external",
"summary": "SUSE Bug 1223763 for CVE-2024-27049",
"url": "https://bugzilla.suse.com/1223763"
},
{
"category": "external",
"summary": "SUSE Bug 1231063 for CVE-2024-27049",
"url": "https://bugzilla.suse.com/1231063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-27049"
},
{
"cve": "CVE-2024-27052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27052"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work\n\nThe workqueue might still be running, when the driver is stopped. To\navoid a use-after-free, call cancel_work_sync() in rtl8xxxu_stop().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27052",
"url": "https://www.suse.com/security/cve/CVE-2024-27052"
},
{
"category": "external",
"summary": "SUSE Bug 1223829 for CVE-2024-27052",
"url": "https://bugzilla.suse.com/1223829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27052"
},
{
"cve": "CVE-2024-27065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27065"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: do not compare internal table flags on updates\n\nRestore skipping transaction if table update does not modify flags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27065",
"url": "https://www.suse.com/security/cve/CVE-2024-27065"
},
{
"category": "external",
"summary": "SUSE Bug 1223836 for CVE-2024-27065",
"url": "https://bugzilla.suse.com/1223836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27065"
},
{
"cve": "CVE-2024-27417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27417"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix potential \"struct net\" leak in inet6_rtm_getaddr()\n\nIt seems that if userspace provides a correct IFA_TARGET_NETNSID value\nbut no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr()\nreturns -EINVAL with an elevated \"struct net\" refcount.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27417",
"url": "https://www.suse.com/security/cve/CVE-2024-27417"
},
{
"category": "external",
"summary": "SUSE Bug 1224721 for CVE-2024-27417",
"url": "https://bugzilla.suse.com/1224721"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27417"
},
{
"cve": "CVE-2024-27434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27434"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: don\u0027t set the MFP flag for the GTK\n\nThe firmware doesn\u0027t need the MFP flag for the GTK, it can even make the\nfirmware crash. in case the AP is configured with: group cipher TKIP and\nMFPC. We would send the GTK with cipher = TKIP and MFP which is of course\nnot possible.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27434",
"url": "https://www.suse.com/security/cve/CVE-2024-27434"
},
{
"category": "external",
"summary": "SUSE Bug 1224710 for CVE-2024-27434",
"url": "https://bugzilla.suse.com/1224710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27434"
},
{
"cve": "CVE-2024-33621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-33621"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Dont Use skb-\u003esk in ipvlan_process_v{4,6}_outbound\n\nRaw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will\nhit WARN_ON_ONCE() in sk_mc_loop() through sch_direct_xmit() path.\n\nWARNING: CPU: 2 PID: 0 at net/core/sock.c:775 sk_mc_loop+0x2d/0x70\nModules linked in: sch_netem ipvlan rfkill cirrus drm_shmem_helper sg drm_kms_helper\nCPU: 2 PID: 0 Comm: swapper/2 Kdump: loaded Not tainted 6.9.0+ #279\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\nRIP: 0010:sk_mc_loop+0x2d/0x70\nCode: fa 0f 1f 44 00 00 65 0f b7 15 f7 96 a3 4f 31 c0 66 85 d2 75 26 48 85 ff 74 1c\nRSP: 0018:ffffa9584015cd78 EFLAGS: 00010212\nRAX: 0000000000000011 RBX: ffff91e585793e00 RCX: 0000000002c6a001\nRDX: 0000000000000000 RSI: 0000000000000040 RDI: ffff91e589c0f000\nRBP: ffff91e5855bd100 R08: 0000000000000000 R09: 3d00545216f43d00\nR10: ffff91e584fdcc50 R11: 00000060dd8616f4 R12: ffff91e58132d000\nR13: ffff91e584fdcc68 R14: ffff91e5869ce800 R15: ffff91e589c0f000\nFS: 0000000000000000(0000) GS:ffff91e898100000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f788f7c44c0 CR3: 0000000008e1a000 CR4: 00000000000006f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\u003cIRQ\u003e\n ? __warn (kernel/panic.c:693)\n ? sk_mc_loop (net/core/sock.c:760)\n ? report_bug (lib/bug.c:201 lib/bug.c:219)\n ? handle_bug (arch/x86/kernel/traps.c:239)\n ? exc_invalid_op (arch/x86/kernel/traps.c:260 (discriminator 1))\n ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621)\n ? sk_mc_loop (net/core/sock.c:760)\n ip6_finish_output2 (net/ipv6/ip6_output.c:83 (discriminator 1))\n ? nf_hook_slow (net/netfilter/core.c:626)\n ip6_finish_output (net/ipv6/ip6_output.c:222)\n ? __pfx_ip6_finish_output (net/ipv6/ip6_output.c:215)\n ipvlan_xmit_mode_l3 (drivers/net/ipvlan/ipvlan_core.c:602) ipvlan\n ipvlan_start_xmit (drivers/net/ipvlan/ipvlan_main.c:226) ipvlan\n dev_hard_start_xmit (net/core/dev.c:3594)\n sch_direct_xmit (net/sched/sch_generic.c:343)\n __qdisc_run (net/sched/sch_generic.c:416)\n net_tx_action (net/core/dev.c:5286)\n handle_softirqs (kernel/softirq.c:555)\n __irq_exit_rcu (kernel/softirq.c:589)\n sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043)\n\nThe warning triggers as this:\npacket_sendmsg\n packet_snd //skb-\u003esk is packet sk\n __dev_queue_xmit\n __dev_xmit_skb //q-\u003eenqueue is not NULL\n __qdisc_run\n sch_direct_xmit\n dev_hard_start_xmit\n ipvlan_start_xmit\n ipvlan_xmit_mode_l3 //l3 mode\n ipvlan_process_outbound //vepa flag\n ipvlan_process_v6_outbound\n ip6_local_out\n __ip6_finish_output\n ip6_finish_output2 //multicast packet\n sk_mc_loop //sk-\u003esk_family is AF_PACKET\n\nCall ip{6}_local_out() with NULL sk in ipvlan as other tunnels to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-33621",
"url": "https://www.suse.com/security/cve/CVE-2024-33621"
},
{
"category": "external",
"summary": "SUSE Bug 1226770 for CVE-2024-33621",
"url": "https://bugzilla.suse.com/1226770"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-33621"
},
{
"cve": "CVE-2024-35789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35789"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes\n\nWhen moving a station out of a VLAN and deleting the VLAN afterwards, the\nfast_rx entry still holds a pointer to the VLAN\u0027s netdev, which can cause\nuse-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx\nafter the VLAN change.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35789",
"url": "https://www.suse.com/security/cve/CVE-2024-35789"
},
{
"category": "external",
"summary": "SUSE Bug 1224749 for CVE-2024-35789",
"url": "https://bugzilla.suse.com/1224749"
},
{
"category": "external",
"summary": "SUSE Bug 1227320 for CVE-2024-35789",
"url": "https://bugzilla.suse.com/1227320"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-35789"
},
{
"cve": "CVE-2024-35800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35800"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: fix panic in kdump kernel\n\nCheck if get_next_variable() is actually valid pointer before\ncalling it. In kdump kernel this method is set to NULL that causes\npanic during the kexec-ed kernel boot.\n\nTested with QEMU and OVMF firmware.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35800",
"url": "https://www.suse.com/security/cve/CVE-2024-35800"
},
{
"category": "external",
"summary": "SUSE Bug 1224507 for CVE-2024-35800",
"url": "https://bugzilla.suse.com/1224507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35800"
},
{
"cve": "CVE-2024-35823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35823"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: fix unicode buffer corruption when deleting characters\n\nThis is the same issue that was fixed for the VGA text buffer in commit\n39cdb68c64d8 (\"vt: fix memory overlapping when deleting chars in the\nbuffer\"). The cure is also the same i.e. replace memcpy() with memmove()\ndue to the overlaping buffers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35823",
"url": "https://www.suse.com/security/cve/CVE-2024-35823"
},
{
"category": "external",
"summary": "SUSE Bug 1224692 for CVE-2024-35823",
"url": "https://bugzilla.suse.com/1224692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35823"
},
{
"cve": "CVE-2024-35845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35845"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: dbg-tlv: ensure NUL termination\n\nThe iwl_fw_ini_debug_info_tlv is used as a string, so we must\nensure the string is terminated correctly before using it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35845",
"url": "https://www.suse.com/security/cve/CVE-2024-35845"
},
{
"category": "external",
"summary": "SUSE Bug 1224731 for CVE-2024-35845",
"url": "https://bugzilla.suse.com/1224731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35845"
},
{
"cve": "CVE-2024-35848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35848"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neeprom: at24: fix memory corruption race condition\n\nIf the eeprom is not accessible, an nvmem device will be registered, the\nread will fail, and the device will be torn down. If another driver\naccesses the nvmem device after the teardown, it will reference\ninvalid memory.\n\nMove the failure point before registering the nvmem device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35848",
"url": "https://www.suse.com/security/cve/CVE-2024-35848"
},
{
"category": "external",
"summary": "SUSE Bug 1224612 for CVE-2024-35848",
"url": "https://bugzilla.suse.com/1224612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35848"
},
{
"cve": "CVE-2024-35852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35852"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work\n\nThe rehash delayed work is rescheduled with a delay if the number of\ncredits at end of the work is not negative as supposedly it means that\nthe migration ended. Otherwise, it is rescheduled immediately.\n\nAfter \"mlxsw: spectrum_acl_tcam: Fix possible use-after-free during\nrehash\" the above is no longer accurate as a non-negative number of\ncredits is no longer indicative of the migration being done. It can also\nhappen if the work encountered an error in which case the migration will\nresume the next time the work is scheduled.\n\nThe significance of the above is that it is possible for the work to be\npending and associated with hints that were allocated when the migration\nstarted. This leads to the hints being leaked [1] when the work is\ncanceled while pending as part of ACL region dismantle.\n\nFix by freeing the hints if hints are associated with a work that was\ncanceled while pending.\n\nBlame the original commit since the reliance on not having a pending\nwork associated with hints is fragile.\n\n[1]\nunreferenced object 0xffff88810e7c3000 (size 256):\n comm \"kworker/0:16\", pid 176, jiffies 4295460353\n hex dump (first 32 bytes):\n 00 30 95 11 81 88 ff ff 61 00 00 00 00 00 00 80 .0......a.......\n 00 00 61 00 40 00 00 00 00 00 00 00 04 00 00 00 ..a.@...........\n backtrace (crc 2544ddb9):\n [\u003c00000000cf8cfab3\u003e] kmalloc_trace+0x23f/0x2a0\n [\u003c000000004d9a1ad9\u003e] objagg_hints_get+0x42/0x390\n [\u003c000000000b143cf3\u003e] mlxsw_sp_acl_erp_rehash_hints_get+0xca/0x400\n [\u003c0000000059bdb60a\u003e] mlxsw_sp_acl_tcam_vregion_rehash_work+0x868/0x1160\n [\u003c00000000e81fd734\u003e] process_one_work+0x59c/0xf20\n [\u003c00000000ceee9e81\u003e] worker_thread+0x799/0x12c0\n [\u003c00000000bda6fe39\u003e] kthread+0x246/0x300\n [\u003c0000000070056d23\u003e] ret_from_fork+0x34/0x70\n [\u003c00000000dea2b93e\u003e] ret_from_fork_asm+0x1a/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35852",
"url": "https://www.suse.com/security/cve/CVE-2024-35852"
},
{
"category": "external",
"summary": "SUSE Bug 1224502 for CVE-2024-35852",
"url": "https://bugzilla.suse.com/1224502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35852"
},
{
"cve": "CVE-2024-35899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: flush pending destroy work before exit_net release\n\nSimilar to 2c9f0293280e (\"netfilter: nf_tables: flush pending destroy\nwork before netlink notifier\") to address a race between exit_net and\nthe destroy workqueue.\n\nThe trace below shows an element to be released via destroy workqueue\nwhile exit_net path (triggered via module removal) has already released\nthe set that is used in such transaction.\n\n[ 1360.547789] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables]\n[ 1360.547861] Read of size 8 at addr ffff888140500cc0 by task kworker/4:1/152465\n[ 1360.547870] CPU: 4 PID: 152465 Comm: kworker/4:1 Not tainted 6.8.0+ #359\n[ 1360.547882] Workqueue: events nf_tables_trans_destroy_work [nf_tables]\n[ 1360.547984] Call Trace:\n[ 1360.547991] \u003cTASK\u003e\n[ 1360.547998] dump_stack_lvl+0x53/0x70\n[ 1360.548014] print_report+0xc4/0x610\n[ 1360.548026] ? __virt_addr_valid+0xba/0x160\n[ 1360.548040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n[ 1360.548054] ? nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables]\n[ 1360.548176] kasan_report+0xae/0xe0\n[ 1360.548189] ? nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables]\n[ 1360.548312] nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables]\n[ 1360.548447] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [nf_tables]\n[ 1360.548577] ? _raw_spin_unlock_irq+0x18/0x30\n[ 1360.548591] process_one_work+0x2f1/0x670\n[ 1360.548610] worker_thread+0x4d3/0x760\n[ 1360.548627] ? __pfx_worker_thread+0x10/0x10\n[ 1360.548640] kthread+0x16b/0x1b0\n[ 1360.548653] ? __pfx_kthread+0x10/0x10\n[ 1360.548665] ret_from_fork+0x2f/0x50\n[ 1360.548679] ? __pfx_kthread+0x10/0x10\n[ 1360.548690] ret_from_fork_asm+0x1a/0x30\n[ 1360.548707] \u003c/TASK\u003e\n\n[ 1360.548719] Allocated by task 192061:\n[ 1360.548726] kasan_save_stack+0x20/0x40\n[ 1360.548739] kasan_save_track+0x14/0x30\n[ 1360.548750] __kasan_kmalloc+0x8f/0xa0\n[ 1360.548760] __kmalloc_node+0x1f1/0x450\n[ 1360.548771] nf_tables_newset+0x10c7/0x1b50 [nf_tables]\n[ 1360.548883] nfnetlink_rcv_batch+0xbc4/0xdc0 [nfnetlink]\n[ 1360.548909] nfnetlink_rcv+0x1a8/0x1e0 [nfnetlink]\n[ 1360.548927] netlink_unicast+0x367/0x4f0\n[ 1360.548935] netlink_sendmsg+0x34b/0x610\n[ 1360.548944] ____sys_sendmsg+0x4d4/0x510\n[ 1360.548953] ___sys_sendmsg+0xc9/0x120\n[ 1360.548961] __sys_sendmsg+0xbe/0x140\n[ 1360.548971] do_syscall_64+0x55/0x120\n[ 1360.548982] entry_SYSCALL_64_after_hwframe+0x55/0x5d\n\n[ 1360.548994] Freed by task 192222:\n[ 1360.548999] kasan_save_stack+0x20/0x40\n[ 1360.549009] kasan_save_track+0x14/0x30\n[ 1360.549019] kasan_save_free_info+0x3b/0x60\n[ 1360.549028] poison_slab_object+0x100/0x180\n[ 1360.549036] __kasan_slab_free+0x14/0x30\n[ 1360.549042] kfree+0xb6/0x260\n[ 1360.549049] __nft_release_table+0x473/0x6a0 [nf_tables]\n[ 1360.549131] nf_tables_exit_net+0x170/0x240 [nf_tables]\n[ 1360.549221] ops_exit_list+0x50/0xa0\n[ 1360.549229] free_exit_list+0x101/0x140\n[ 1360.549236] unregister_pernet_operations+0x107/0x160\n[ 1360.549245] unregister_pernet_subsys+0x1c/0x30\n[ 1360.549254] nf_tables_module_exit+0x43/0x80 [nf_tables]\n[ 1360.549345] __do_sys_delete_module+0x253/0x370\n[ 1360.549352] do_syscall_64+0x55/0x120\n[ 1360.549360] entry_SYSCALL_64_after_hwframe+0x55/0x5d\n\n(gdb) list *__nft_release_table+0x473\n0x1e033 is in __nft_release_table (net/netfilter/nf_tables_api.c:11354).\n11349 list_for_each_entry_safe(flowtable, nf, \u0026table-\u003eflowtables, list) {\n11350 list_del(\u0026flowtable-\u003elist);\n11351 nft_use_dec(\u0026table-\u003euse);\n11352 nf_tables_flowtable_destroy(flowtable);\n11353 }\n11354 list_for_each_entry_safe(set, ns, \u0026table-\u003esets, list) {\n11355 list_del(\u0026set-\u003elist);\n11356 nft_use_dec(\u0026table-\u003euse);\n11357 if (set-\u003eflags \u0026 (NFT_SET_MAP | NFT_SET_OBJECT))\n11358 nft_map_deactivat\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35899",
"url": "https://www.suse.com/security/cve/CVE-2024-35899"
},
{
"category": "external",
"summary": "SUSE Bug 1224499 for CVE-2024-35899",
"url": "https://bugzilla.suse.com/1224499"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35899"
},
{
"cve": "CVE-2024-35911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix memory corruption bug with suspend and rebuild\n\nThe ice driver would previously panic after suspend. This is caused\nfrom the driver *only* calling the ice_vsi_free_q_vectors() function by\nitself, when it is suspending. Since commit b3e7b3a6ee92 (\"ice: prevent\nNULL pointer deref during reload\") the driver has zeroed out\nnum_q_vectors, and only restored it in ice_vsi_cfg_def().\n\nThis further causes the ice_rebuild() function to allocate a zero length\nbuffer, after which num_q_vectors is updated, and then the new value of\nnum_q_vectors is used to index into the zero length buffer, which\ncorrupts memory.\n\nThe fix entails making sure all the code referencing num_q_vectors only\ndoes so after it has been reset via ice_vsi_cfg_def().\n\nI didn\u0027t perform a full bisect, but I was able to test against 6.1.77\nkernel and that ice driver works fine for suspend/resume with no panic,\nso sometime since then, this problem was introduced.\n\nAlso clean up an un-needed init of a local variable in the function\nbeing modified.\n\nPANIC from 6.8.0-rc1:\n\n[1026674.915596] PM: suspend exit\n[1026675.664697] ice 0000:17:00.1: PTP reset successful\n[1026675.664707] ice 0000:17:00.1: 2755 msecs passed between update to cached PHC time\n[1026675.667660] ice 0000:b1:00.0: PTP reset successful\n[1026675.675944] ice 0000:b1:00.0: 2832 msecs passed between update to cached PHC time\n[1026677.137733] ixgbe 0000:31:00.0 ens787: NIC Link is Up 1 Gbps, Flow Control: None\n[1026677.190201] BUG: kernel NULL pointer dereference, address: 0000000000000010\n[1026677.192753] ice 0000:17:00.0: PTP reset successful\n[1026677.192764] ice 0000:17:00.0: 4548 msecs passed between update to cached PHC time\n[1026677.197928] #PF: supervisor read access in kernel mode\n[1026677.197933] #PF: error_code(0x0000) - not-present page\n[1026677.197937] PGD 1557a7067 P4D 0\n[1026677.212133] ice 0000:b1:00.1: PTP reset successful\n[1026677.212143] ice 0000:b1:00.1: 4344 msecs passed between update to cached PHC time\n[1026677.212575]\n[1026677.243142] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[1026677.247918] CPU: 23 PID: 42790 Comm: kworker/23:0 Kdump: loaded Tainted: G W 6.8.0-rc1+ #1\n[1026677.257989] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022\n[1026677.269367] Workqueue: ice ice_service_task [ice]\n[1026677.274592] RIP: 0010:ice_vsi_rebuild_set_coalesce+0x130/0x1e0 [ice]\n[1026677.281421] Code: 0f 84 3a ff ff ff 41 0f b7 74 ec 02 66 89 b0 22 02 00 00 81 e6 ff 1f 00 00 e8 ec fd ff ff e9 35 ff ff ff 48 8b 43 30 49 63 ed \u003c41\u003e 0f b7 34 24 41 83 c5 01 48 8b 3c e8 66 89 b7 aa 02 00 00 81 e6\n[1026677.300877] RSP: 0018:ff3be62a6399bcc0 EFLAGS: 00010202\n[1026677.306556] RAX: ff28691e28980828 RBX: ff28691e41099828 RCX: 0000000000188000\n[1026677.314148] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ff28691e41099828\n[1026677.321730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\n[1026677.329311] R10: 0000000000000007 R11: ffffffffffffffc0 R12: 0000000000000010\n[1026677.336896] R13: 0000000000000000 R14: 0000000000000000 R15: ff28691e0eaa81a0\n[1026677.344472] FS: 0000000000000000(0000) GS:ff28693cbffc0000(0000) knlGS:0000000000000000\n[1026677.353000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[1026677.359195] CR2: 0000000000000010 CR3: 0000000128df4001 CR4: 0000000000771ef0\n[1026677.366779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[1026677.374369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[1026677.381952] PKRU: 55555554\n[1026677.385116] Call Trace:\n[1026677.388023] \u003cTASK\u003e\n[1026677.390589] ? __die+0x20/0x70\n[1026677.394105] ? page_fault_oops+0x82/0x160\n[1026677.398576] ? do_user_addr_fault+0x65/0x6a0\n[1026677.403307] ? exc_page_fault+0x6a/0x150\n[1026677.407694] ? asm_exc_page_fault+0x22/0x30\n[1026677.412349] ? ice_vsi_rebuild_set_coalesce+0x130/0x1e0 [ice]\n[1026677.4186\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35911",
"url": "https://www.suse.com/security/cve/CVE-2024-35911"
},
{
"category": "external",
"summary": "SUSE Bug 1224486 for CVE-2024-35911",
"url": "https://bugzilla.suse.com/1224486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35911"
},
{
"cve": "CVE-2024-35937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35937"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: check A-MSDU format more carefully\n\nIf it looks like there\u0027s another subframe in the A-MSDU\nbut the header isn\u0027t fully there, we can end up reading\ndata out of bounds, only to discard later. Make this a\nbit more careful and check if the subframe header can\neven be present.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35937",
"url": "https://www.suse.com/security/cve/CVE-2024-35937"
},
{
"category": "external",
"summary": "SUSE Bug 1224526 for CVE-2024-35937",
"url": "https://bugzilla.suse.com/1224526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35937"
},
{
"cve": "CVE-2024-35969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35969"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr\n\nAlthough ipv6_get_ifaddr walks inet6_addr_lst under the RCU lock, it\nstill means hlist_for_each_entry_rcu can return an item that got removed\nfrom the list. The memory itself of such item is not freed thanks to RCU\nbut nothing guarantees the actual content of the memory is sane.\n\nIn particular, the reference count can be zero. This can happen if\nipv6_del_addr is called in parallel. ipv6_del_addr removes the entry\nfrom inet6_addr_lst (hlist_del_init_rcu(\u0026ifp-\u003eaddr_lst)) and drops all\nreferences (__in6_ifa_put(ifp) + in6_ifa_put(ifp)). With bad enough\ntiming, this can happen:\n\n1. In ipv6_get_ifaddr, hlist_for_each_entry_rcu returns an entry.\n\n2. Then, the whole ipv6_del_addr is executed for the given entry. The\n reference count drops to zero and kfree_rcu is scheduled.\n\n3. ipv6_get_ifaddr continues and tries to increments the reference count\n (in6_ifa_hold).\n\n4. The rcu is unlocked and the entry is freed.\n\n5. The freed entry is returned.\n\nPrevent increasing of the reference count in such case. The name\nin6_ifa_hold_safe is chosen to mimic the existing fib6_info_hold_safe.\n\n[ 41.506330] refcount_t: addition on 0; use-after-free.\n[ 41.506760] WARNING: CPU: 0 PID: 595 at lib/refcount.c:25 refcount_warn_saturate+0xa5/0x130\n[ 41.507413] Modules linked in: veth bridge stp llc\n[ 41.507821] CPU: 0 PID: 595 Comm: python3 Not tainted 6.9.0-rc2.main-00208-g49563be82afa #14\n[ 41.508479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\n[ 41.509163] RIP: 0010:refcount_warn_saturate+0xa5/0x130\n[ 41.509586] Code: ad ff 90 0f 0b 90 90 c3 cc cc cc cc 80 3d c0 30 ad 01 00 75 a0 c6 05 b7 30 ad 01 01 90 48 c7 c7 38 cc 7a 8c e8 cc 18 ad ff 90 \u003c0f\u003e 0b 90 90 c3 cc cc cc cc 80 3d 98 30 ad 01 00 0f 85 75 ff ff ff\n[ 41.510956] RSP: 0018:ffffbda3c026baf0 EFLAGS: 00010282\n[ 41.511368] RAX: 0000000000000000 RBX: ffff9e9c46914800 RCX: 0000000000000000\n[ 41.511910] RDX: ffff9e9c7ec29c00 RSI: ffff9e9c7ec1c900 RDI: ffff9e9c7ec1c900\n[ 41.512445] RBP: ffff9e9c43660c9c R08: 0000000000009ffb R09: 00000000ffffdfff\n[ 41.512998] R10: 00000000ffffdfff R11: ffffffff8ca58a40 R12: ffff9e9c4339a000\n[ 41.513534] R13: 0000000000000001 R14: ffff9e9c438a0000 R15: ffffbda3c026bb48\n[ 41.514086] FS: 00007fbc4cda1740(0000) GS:ffff9e9c7ec00000(0000) knlGS:0000000000000000\n[ 41.514726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 41.515176] CR2: 000056233b337d88 CR3: 000000000376e006 CR4: 0000000000370ef0\n[ 41.515713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 41.516252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 41.516799] Call Trace:\n[ 41.517037] \u003cTASK\u003e\n[ 41.517249] ? __warn+0x7b/0x120\n[ 41.517535] ? refcount_warn_saturate+0xa5/0x130\n[ 41.517923] ? report_bug+0x164/0x190\n[ 41.518240] ? handle_bug+0x3d/0x70\n[ 41.518541] ? exc_invalid_op+0x17/0x70\n[ 41.520972] ? asm_exc_invalid_op+0x1a/0x20\n[ 41.521325] ? refcount_warn_saturate+0xa5/0x130\n[ 41.521708] ipv6_get_ifaddr+0xda/0xe0\n[ 41.522035] inet6_rtm_getaddr+0x342/0x3f0\n[ 41.522376] ? __pfx_inet6_rtm_getaddr+0x10/0x10\n[ 41.522758] rtnetlink_rcv_msg+0x334/0x3d0\n[ 41.523102] ? netlink_unicast+0x30f/0x390\n[ 41.523445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10\n[ 41.523832] netlink_rcv_skb+0x53/0x100\n[ 41.524157] netlink_unicast+0x23b/0x390\n[ 41.524484] netlink_sendmsg+0x1f2/0x440\n[ 41.524826] __sys_sendto+0x1d8/0x1f0\n[ 41.525145] __x64_sys_sendto+0x1f/0x30\n[ 41.525467] do_syscall_64+0xa5/0x1b0\n[ 41.525794] entry_SYSCALL_64_after_hwframe+0x72/0x7a\n[ 41.526213] RIP: 0033:0x7fbc4cfcea9a\n[ 41.526528] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89\n[ 41.527942] RSP: 002b:00007f\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35969",
"url": "https://www.suse.com/security/cve/CVE-2024-35969"
},
{
"category": "external",
"summary": "SUSE Bug 1224580 for CVE-2024-35969",
"url": "https://bugzilla.suse.com/1224580"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35969"
},
{
"cve": "CVE-2024-36005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36005"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: honor table dormant flag from netdev release event path\n\nCheck for table dormant flag otherwise netdev release event path tries\nto unregister an already unregistered hook.\n\n[524854.857999] ------------[ cut here ]------------\n[524854.858010] WARNING: CPU: 0 PID: 3386599 at net/netfilter/core.c:501 __nf_unregister_net_hook+0x21a/0x260\n[...]\n[524854.858848] CPU: 0 PID: 3386599 Comm: kworker/u32:2 Not tainted 6.9.0-rc3+ #365\n[524854.858869] Workqueue: netns cleanup_net\n[524854.858886] RIP: 0010:__nf_unregister_net_hook+0x21a/0x260\n[524854.858903] Code: 24 e8 aa 73 83 ff 48 63 43 1c 83 f8 01 0f 85 3d ff ff ff e8 98 d1 f0 ff 48 8b 3c 24 e8 8f 73 83 ff 48 63 43 1c e9 26 ff ff ff \u003c0f\u003e 0b 48 83 c4 18 48 c7 c7 00 68 e9 82 5b 5d 41 5c 41 5d 41 5e 41\n[524854.858914] RSP: 0018:ffff8881e36d79e0 EFLAGS: 00010246\n[524854.858926] RAX: 0000000000000000 RBX: ffff8881339ae790 RCX: ffffffff81ba524a\n[524854.858936] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8881c8a16438\n[524854.858945] RBP: ffff8881c8a16438 R08: 0000000000000001 R09: ffffed103c6daf34\n[524854.858954] R10: ffff8881e36d79a7 R11: 0000000000000000 R12: 0000000000000005\n[524854.858962] R13: ffff8881c8a16000 R14: 0000000000000000 R15: ffff8881351b5a00\n[524854.858971] FS: 0000000000000000(0000) GS:ffff888390800000(0000) knlGS:0000000000000000\n[524854.858982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[524854.858991] CR2: 00007fc9be0f16f4 CR3: 00000001437cc004 CR4: 00000000001706f0\n[524854.859000] Call Trace:\n[524854.859006] \u003cTASK\u003e\n[524854.859013] ? __warn+0x9f/0x1a0\n[524854.859027] ? __nf_unregister_net_hook+0x21a/0x260\n[524854.859044] ? report_bug+0x1b1/0x1e0\n[524854.859060] ? handle_bug+0x3c/0x70\n[524854.859071] ? exc_invalid_op+0x17/0x40\n[524854.859083] ? asm_exc_invalid_op+0x1a/0x20\n[524854.859100] ? __nf_unregister_net_hook+0x6a/0x260\n[524854.859116] ? __nf_unregister_net_hook+0x21a/0x260\n[524854.859135] nf_tables_netdev_event+0x337/0x390 [nf_tables]\n[524854.859304] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables]\n[524854.859461] ? packet_notifier+0xb3/0x360\n[524854.859476] ? _raw_spin_unlock_irqrestore+0x11/0x40\n[524854.859489] ? dcbnl_netdevice_event+0x35/0x140\n[524854.859507] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables]\n[524854.859661] notifier_call_chain+0x7d/0x140\n[524854.859677] unregister_netdevice_many_notify+0x5e1/0xae0",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36005",
"url": "https://www.suse.com/security/cve/CVE-2024-36005"
},
{
"category": "external",
"summary": "SUSE Bug 1224539 for CVE-2024-36005",
"url": "https://bugzilla.suse.com/1224539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36005"
},
{
"cve": "CVE-2024-36017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36017"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation\n\nEach attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a\nstruct ifla_vf_vlan_info so the size of such attribute needs to be at least\nof sizeof(struct ifla_vf_vlan_info) which is 14 bytes.\nThe current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes)\nwhich is less than sizeof(struct ifla_vf_vlan_info) so this validation\nis not enough and a too small attribute might be cast to a\nstruct ifla_vf_vlan_info, this might result in an out of bands\nread access when accessing the saved (casted) entry in ivvl.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36017",
"url": "https://www.suse.com/security/cve/CVE-2024-36017"
},
{
"category": "external",
"summary": "SUSE Bug 1225681 for CVE-2024-36017",
"url": "https://bugzilla.suse.com/1225681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36017"
},
{
"cve": "CVE-2024-36020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix vf may be used uninitialized in this function warning\n\nTo fix the regression introduced by commit 52424f974bc5, which causes\nservers hang in very hard to reproduce conditions with resets races.\nUsing two sources for the information is the root cause.\nIn this function before the fix bumping v didn\u0027t mean bumping vf\npointer. But the code used this variables interchangeably, so stale vf\ncould point to different/not intended vf.\n\nRemove redundant \"v\" variable and iterate via single VF pointer across\nwhole function instead to guarantee VF pointer validity.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36020",
"url": "https://www.suse.com/security/cve/CVE-2024-36020"
},
{
"category": "external",
"summary": "SUSE Bug 1225698 for CVE-2024-36020",
"url": "https://bugzilla.suse.com/1225698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36020"
},
{
"cve": "CVE-2024-36489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36489"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix missing memory barrier in tls_init\n\nIn tls_init(), a write memory barrier is missing, and store-store\nreordering may cause NULL dereference in tls_{setsockopt,getsockopt}.\n\nCPU0 CPU1\n----- -----\n// In tls_init()\n// In tls_ctx_create()\nctx = kzalloc()\nctx-\u003esk_proto = READ_ONCE(sk-\u003esk_prot) -(1)\n\n// In update_sk_prot()\nWRITE_ONCE(sk-\u003esk_prot, tls_prots) -(2)\n\n // In sock_common_setsockopt()\n READ_ONCE(sk-\u003esk_prot)-\u003esetsockopt()\n\n // In tls_{setsockopt,getsockopt}()\n ctx-\u003esk_proto-\u003esetsockopt() -(3)\n\nIn the above scenario, when (1) and (2) are reordered, (3) can observe\nthe NULL value of ctx-\u003esk_proto, causing NULL dereference.\n\nTo fix it, we rely on rcu_assign_pointer() which implies the release\nbarrier semantic. By moving rcu_assign_pointer() after ctx-\u003esk_proto is\ninitialized, we can ensure that ctx-\u003esk_proto are visible when\nchanging sk-\u003esk_prot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36489",
"url": "https://www.suse.com/security/cve/CVE-2024-36489"
},
{
"category": "external",
"summary": "SUSE Bug 1226874 for CVE-2024-36489",
"url": "https://bugzilla.suse.com/1226874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36489"
},
{
"cve": "CVE-2024-36903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix potential uninit-value access in __ip6_make_skb()\n\nAs it was done in commit fc1092f51567 (\"ipv4: Fix uninit-value access in\n__ip_make_skb()\") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6-\u003eflowi6_flags\ninstead of testing HDRINCL on the socket to avoid a race condition which\ncauses uninit-value access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36903",
"url": "https://www.suse.com/security/cve/CVE-2024-36903"
},
{
"category": "external",
"summary": "SUSE Bug 1225741 for CVE-2024-36903",
"url": "https://bugzilla.suse.com/1225741"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36903"
},
{
"cve": "CVE-2024-36921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36921"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: guard against invalid STA ID on removal\n\nGuard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would\nresult in out-of-bounds array accesses. This prevents issues should the\ndriver get into a bad state during error handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36921",
"url": "https://www.suse.com/security/cve/CVE-2024-36921"
},
{
"category": "external",
"summary": "SUSE Bug 1225769 for CVE-2024-36921",
"url": "https://bugzilla.suse.com/1225769"
},
{
"category": "external",
"summary": "SUSE Bug 1225850 for CVE-2024-36921",
"url": "https://bugzilla.suse.com/1225850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-36921"
},
{
"cve": "CVE-2024-36922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: read txq-\u003eread_ptr under lock\n\nIf we read txq-\u003eread_ptr without lock, we can read the same\nvalue twice, then obtain the lock, and reclaim from there\nto two different places, but crucially reclaim the same\nentry twice, resulting in the WARN_ONCE() a little later.\nFix that by reading txq-\u003eread_ptr under lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36922",
"url": "https://www.suse.com/security/cve/CVE-2024-36922"
},
{
"category": "external",
"summary": "SUSE Bug 1225805 for CVE-2024-36922",
"url": "https://bugzilla.suse.com/1225805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36922"
},
{
"cve": "CVE-2024-36929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: core: reject skb_copy(_expand) for fraglist GSO skbs\n\nSKB_GSO_FRAGLIST skbs must not be linearized, otherwise they become\ninvalid. Return NULL if such an skb is passed to skb_copy or\nskb_copy_expand, in order to prevent a crash on a potential later\ncall to skb_gso_segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36929",
"url": "https://www.suse.com/security/cve/CVE-2024-36929"
},
{
"category": "external",
"summary": "SUSE Bug 1225814 for CVE-2024-36929",
"url": "https://bugzilla.suse.com/1225814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36929"
},
{
"cve": "CVE-2024-36941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36941"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: don\u0027t free NULL coalescing rule\n\nIf the parsing fails, we can dereference a NULL pointer here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36941",
"url": "https://www.suse.com/security/cve/CVE-2024-36941"
},
{
"category": "external",
"summary": "SUSE Bug 1225835 for CVE-2024-36941",
"url": "https://bugzilla.suse.com/1225835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36941"
},
{
"cve": "CVE-2024-36971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36971"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk-\u003edst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk-\u003esk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three -\u003enegative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36971",
"url": "https://www.suse.com/security/cve/CVE-2024-36971"
},
{
"category": "external",
"summary": "SUSE Bug 1226145 for CVE-2024-36971",
"url": "https://bugzilla.suse.com/1226145"
},
{
"category": "external",
"summary": "SUSE Bug 1226324 for CVE-2024-36971",
"url": "https://bugzilla.suse.com/1226324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-36971"
},
{
"cve": "CVE-2024-37353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-37353"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-37353",
"url": "https://www.suse.com/security/cve/CVE-2024-37353"
},
{
"category": "external",
"summary": "SUSE Bug 1226875 for CVE-2024-37353",
"url": "https://bugzilla.suse.com/1226875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-37353"
},
{
"cve": "CVE-2024-37356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-37356"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix shift-out-of-bounds in dctcp_update_alpha().\n\nIn dctcp_update_alpha(), we use a module parameter dctcp_shift_g\nas follows:\n\n alpha -= min_not_zero(alpha, alpha \u003e\u003e dctcp_shift_g);\n ...\n delivered_ce \u003c\u003c= (10 - dctcp_shift_g);\n\nIt seems syzkaller started fuzzing module parameters and triggered\nshift-out-of-bounds [0] by setting 100 to dctcp_shift_g:\n\n memcpy((void*)0x20000080,\n \"/sys/module/tcp_dctcp/parameters/dctcp_shift_g\\000\", 47);\n res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000080ul,\n /*flags=*/2ul, /*mode=*/0ul);\n memcpy((void*)0x20000000, \"100\\000\", 4);\n syscall(__NR_write, /*fd=*/r[0], /*val=*/0x20000000ul, /*len=*/4ul);\n\nLet\u0027s limit the max value of dctcp_shift_g by param_set_uint_minmax().\n\nWith this patch:\n\n # echo 10 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\n # cat /sys/module/tcp_dctcp/parameters/dctcp_shift_g\n 10\n # echo 11 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\n -bash: echo: write error: Invalid argument\n\n[0]:\nUBSAN: shift-out-of-bounds in net/ipv4/tcp_dctcp.c:143:12\nshift exponent 100 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 0 PID: 8083 Comm: syz-executor345 Not tainted 6.9.0-05151-g1b294a1f3561 #2\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.13.0-1ubuntu1.1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x201/0x300 lib/dump_stack.c:114\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x346/0x3a0 lib/ubsan.c:468\n dctcp_update_alpha+0x540/0x570 net/ipv4/tcp_dctcp.c:143\n tcp_in_ack_event net/ipv4/tcp_input.c:3802 [inline]\n tcp_ack+0x17b1/0x3bc0 net/ipv4/tcp_input.c:3948\n tcp_rcv_state_process+0x57a/0x2290 net/ipv4/tcp_input.c:6711\n tcp_v4_do_rcv+0x764/0xc40 net/ipv4/tcp_ipv4.c:1937\n sk_backlog_rcv include/net/sock.h:1106 [inline]\n __release_sock+0x20f/0x350 net/core/sock.c:2983\n release_sock+0x61/0x1f0 net/core/sock.c:3549\n mptcp_subflow_shutdown+0x3d0/0x620 net/mptcp/protocol.c:2907\n mptcp_check_send_data_fin+0x225/0x410 net/mptcp/protocol.c:2976\n __mptcp_close+0x238/0xad0 net/mptcp/protocol.c:3072\n mptcp_close+0x2a/0x1a0 net/mptcp/protocol.c:3127\n inet_release+0x190/0x1f0 net/ipv4/af_inet.c:437\n __sock_release net/socket.c:659 [inline]\n sock_close+0xc0/0x240 net/socket.c:1421\n __fput+0x41b/0x890 fs/file_table.c:422\n task_work_run+0x23b/0x300 kernel/task_work.c:180\n exit_task_work include/linux/task_work.h:38 [inline]\n do_exit+0x9c8/0x2540 kernel/exit.c:878\n do_group_exit+0x201/0x2b0 kernel/exit.c:1027\n __do_sys_exit_group kernel/exit.c:1038 [inline]\n __se_sys_exit_group kernel/exit.c:1036 [inline]\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xe4/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\nRIP: 0033:0x7f6c2b5005b6\nCode: Unable to access opcode bytes at 0x7f6c2b50058c.\nRSP: 002b:00007ffe883eb948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\nRAX: ffffffffffffffda RBX: 00007f6c2b5862f0 RCX: 00007f6c2b5005b6\nRDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001\nRBP: 0000000000000001 R08: 00000000000000e7 R09: ffffffffffffffc0\nR10: 0000000000000006 R11: 0000000000000246 R12: 00007f6c2b5862f0\nR13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-37356",
"url": "https://www.suse.com/security/cve/CVE-2024-37356"
},
{
"category": "external",
"summary": "SUSE Bug 1226833 for CVE-2024-37356",
"url": "https://bugzilla.suse.com/1226833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-37356"
},
{
"cve": "CVE-2024-38391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38391"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38391",
"url": "https://www.suse.com/security/cve/CVE-2024-38391"
},
{
"category": "external",
"summary": "SUSE Bug 1226894 for CVE-2024-38391",
"url": "https://bugzilla.suse.com/1226894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38391"
},
{
"cve": "CVE-2024-38558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix overwriting ct original tuple for ICMPv6\n\nOVS_PACKET_CMD_EXECUTE has 3 main attributes:\n - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format.\n - OVS_PACKET_ATTR_PACKET - Binary packet content.\n - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet.\n\nOVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure\nwith the metadata like conntrack state, input port, recirculation id,\netc. Then the packet itself gets parsed to populate the rest of the\nkeys from the packet headers.\n\nWhenever the packet parsing code starts parsing the ICMPv6 header, it\nfirst zeroes out fields in the key corresponding to Neighbor Discovery\ninformation even if it is not an ND packet.\n\nIt is an \u0027ipv6.nd\u0027 field. However, the \u0027ipv6\u0027 is a union that shares\nthe space between \u0027nd\u0027 and \u0027ct_orig\u0027 that holds the original tuple\nconntrack metadata parsed from the OVS_PACKET_ATTR_KEY.\n\nND packets should not normally have conntrack state, so it\u0027s fine to\nshare the space, but normal ICMPv6 Echo packets or maybe other types of\nICMPv6 can have the state attached and it should not be overwritten.\n\nThe issue results in all but the last 4 bytes of the destination\naddress being wiped from the original conntrack tuple leading to\nincorrect packet matching and potentially executing wrong actions\nin case this packet recirculates within the datapath or goes back\nto userspace.\n\nND fields should not be accessed in non-ND packets, so not clearing\nthem should be fine. Executing memset() only for actual ND packets to\navoid the issue.\n\nInitializing the whole thing before parsing is needed because ND packet\nmay not contain all the options.\n\nThe issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn\u0027t\naffect packets entering OVS datapath from network interfaces, because\nin this case CT metadata is populated from skb after the packet is\nalready parsed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38558",
"url": "https://www.suse.com/security/cve/CVE-2024-38558"
},
{
"category": "external",
"summary": "SUSE Bug 1226783 for CVE-2024-38558",
"url": "https://bugzilla.suse.com/1226783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38558"
},
{
"cve": "CVE-2024-38575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: pcie: handle randbuf allocation failure\n\nThe kzalloc() in brcmf_pcie_download_fw_nvram() will return null\nif the physical memory has run out. As a result, if we use\nget_random_bytes() to generate random bytes in the randbuf, the\nnull pointer dereference bug will happen.\n\nIn order to prevent allocation failure, this patch adds a separate\nfunction using buffer on kernel stack to generate random bytes in\nthe randbuf, which could prevent the kernel stack from overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38575",
"url": "https://www.suse.com/security/cve/CVE-2024-38575"
},
{
"category": "external",
"summary": "SUSE Bug 1226612 for CVE-2024-38575",
"url": "https://bugzilla.suse.com/1226612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38575"
},
{
"cve": "CVE-2024-39487",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39487"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()\n\nIn function bond_option_arp_ip_targets_set(), if newval-\u003estring is an\nempty string, newval-\u003estring+1 will point to the byte after the\nstring, causing an out-of-bound read.\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418\nRead of size 1 at addr ffff8881119c4781 by task syz-executor665/8107\nCPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:364 [inline]\n print_report+0xc1/0x5e0 mm/kasan/report.c:475\n kasan_report+0xbe/0xf0 mm/kasan/report.c:588\n strlen+0x7d/0xa0 lib/string.c:418\n __fortify_strlen include/linux/fortify-string.h:210 [inline]\n in4_pton+0xa3/0x3f0 net/core/utils.c:130\n bond_option_arp_ip_targets_set+0xc2/0x910\ndrivers/net/bonding/bond_options.c:1201\n __bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767\n __bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792\n bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817\n bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156\n dev_attr_store+0x54/0x80 drivers/base/core.c:2366\n sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136\n kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334\n call_write_iter include/linux/fs.h:2020 [inline]\n new_sync_write fs/read_write.c:491 [inline]\n vfs_write+0x96a/0xd80 fs/read_write.c:584\n ksys_write+0x122/0x250 fs/read_write.c:637\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n---[ end trace ]---\n\nFix it by adding a check of string length before using it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39487",
"url": "https://www.suse.com/security/cve/CVE-2024-39487"
},
{
"category": "external",
"summary": "SUSE Bug 1227573 for CVE-2024-39487",
"url": "https://bugzilla.suse.com/1227573"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-39487"
},
{
"cve": "CVE-2024-40928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40928"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()\n\nClang static checker (scan-build) warning:\nnet/ethtool/ioctl.c:line 2233, column 2\nCalled function pointer is null (null dereference).\n\nReturn \u0027-EOPNOTSUPP\u0027 when \u0027ops-\u003eget_ethtool_phy_stats\u0027 is NULL to fix\nthis typo error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40928",
"url": "https://www.suse.com/security/cve/CVE-2024-40928"
},
{
"category": "external",
"summary": "SUSE Bug 1227788 for CVE-2024-40928",
"url": "https://bugzilla.suse.com/1227788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2024-40928"
},
{
"cve": "CVE-2024-40954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40954"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: do not leave a dangling sk pointer, when socket creation fails\n\nIt is possible to trigger a use-after-free by:\n * attaching an fentry probe to __sock_release() and the probe calling the\n bpf_get_socket_cookie() helper\n * running traceroute -I 1.1.1.1 on a freshly booted VM\n\nA KASAN enabled kernel will log something like below (decoded and stripped):\n==================================================================\nBUG: KASAN: slab-use-after-free in __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29)\nRead of size 8 at addr ffff888007110dd8 by task traceroute/299\n\nCPU: 2 PID: 299 Comm: traceroute Tainted: G E 6.10.0-rc2+ #2\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\ndump_stack_lvl (lib/dump_stack.c:117 (discriminator 1))\nprint_report (mm/kasan/report.c:378 mm/kasan/report.c:488)\n? __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29)\nkasan_report (mm/kasan/report.c:603)\n? __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29)\nkasan_check_range (mm/kasan/generic.c:183 mm/kasan/generic.c:189)\n__sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29)\nbpf_get_socket_ptr_cookie (./arch/x86/include/asm/preempt.h:94 ./include/linux/sock_diag.h:42 net/core/filter.c:5094 net/core/filter.c:5092)\nbpf_prog_875642cf11f1d139___sock_release+0x6e/0x8e\nbpf_trampoline_6442506592+0x47/0xaf\n__sock_release (net/socket.c:652)\n__sock_create (net/socket.c:1601)\n...\nAllocated by task 299 on cpu 2 at 78.328492s:\nkasan_save_stack (mm/kasan/common.c:48)\nkasan_save_track (mm/kasan/common.c:68)\n__kasan_slab_alloc (mm/kasan/common.c:312 mm/kasan/common.c:338)\nkmem_cache_alloc_noprof (mm/slub.c:3941 mm/slub.c:4000 mm/slub.c:4007)\nsk_prot_alloc (net/core/sock.c:2075)\nsk_alloc (net/core/sock.c:2134)\ninet_create (net/ipv4/af_inet.c:327 net/ipv4/af_inet.c:252)\n__sock_create (net/socket.c:1572)\n__sys_socket (net/socket.c:1660 net/socket.c:1644 net/socket.c:1706)\n__x64_sys_socket (net/socket.c:1718)\ndo_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n\nFreed by task 299 on cpu 2 at 78.328502s:\nkasan_save_stack (mm/kasan/common.c:48)\nkasan_save_track (mm/kasan/common.c:68)\nkasan_save_free_info (mm/kasan/generic.c:582)\npoison_slab_object (mm/kasan/common.c:242)\n__kasan_slab_free (mm/kasan/common.c:256)\nkmem_cache_free (mm/slub.c:4437 mm/slub.c:4511)\n__sk_destruct (net/core/sock.c:2117 net/core/sock.c:2208)\ninet_create (net/ipv4/af_inet.c:397 net/ipv4/af_inet.c:252)\n__sock_create (net/socket.c:1572)\n__sys_socket (net/socket.c:1660 net/socket.c:1644 net/socket.c:1706)\n__x64_sys_socket (net/socket.c:1718)\ndo_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n\nFix this by clearing the struct socket reference in sk_common_release() to cover\nall protocol families create functions, which may already attached the\nreference to the sk object with sock_init_data().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40954",
"url": "https://www.suse.com/security/cve/CVE-2024-40954"
},
{
"category": "external",
"summary": "SUSE Bug 1227808 for CVE-2024-40954",
"url": "https://bugzilla.suse.com/1227808"
},
{
"category": "external",
"summary": "SUSE Bug 1228786 for CVE-2024-40954",
"url": "https://bugzilla.suse.com/1228786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-40954"
},
{
"cve": "CVE-2024-40958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40958"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetns: Make get_net_ns() handle zero refcount net\n\nSyzkaller hit a warning:\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 7890 at lib/refcount.c:25 refcount_warn_saturate+0xdf/0x1d0\nModules linked in:\nCPU: 3 PID: 7890 Comm: tun Not tainted 6.10.0-rc3-00100-gcaa4f9578aba-dirty #310\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xdf/0x1d0\nCode: 41 49 04 31 ff 89 de e8 9f 1e cd fe 84 db 75 9c e8 76 26 cd fe c6 05 b6 41 49 04 01 90 48 c7 c7 b8 8e 25 86 e8 d2 05 b5 fe 90 \u003c0f\u003e 0b 90 90 e9 79 ff ff ff e8 53 26 cd fe 0f b6 1\nRSP: 0018:ffff8881067b7da0 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff811c72ac\nRDX: ffff8881026a2140 RSI: ffffffff811c72b5 RDI: 0000000000000001\nRBP: ffff8881067b7db0 R08: 0000000000000000 R09: 205b5d3730353139\nR10: 0000000000000000 R11: 205d303938375420 R12: ffff8881086500c4\nR13: ffff8881086500c4 R14: ffff8881086500b0 R15: ffff888108650040\nFS: 00007f5b2961a4c0(0000) GS:ffff88823bd00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055d7ed36fd18 CR3: 00000001482f6000 CR4: 00000000000006f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n ? show_regs+0xa3/0xc0\n ? __warn+0xa5/0x1c0\n ? refcount_warn_saturate+0xdf/0x1d0\n ? report_bug+0x1fc/0x2d0\n ? refcount_warn_saturate+0xdf/0x1d0\n ? handle_bug+0xa1/0x110\n ? exc_invalid_op+0x3c/0xb0\n ? asm_exc_invalid_op+0x1f/0x30\n ? __warn_printk+0xcc/0x140\n ? __warn_printk+0xd5/0x140\n ? refcount_warn_saturate+0xdf/0x1d0\n get_net_ns+0xa4/0xc0\n ? __pfx_get_net_ns+0x10/0x10\n open_related_ns+0x5a/0x130\n __tun_chr_ioctl+0x1616/0x2370\n ? __sanitizer_cov_trace_switch+0x58/0xa0\n ? __sanitizer_cov_trace_const_cmp2+0x1c/0x30\n ? __pfx_tun_chr_ioctl+0x10/0x10\n tun_chr_ioctl+0x2f/0x40\n __x64_sys_ioctl+0x11b/0x160\n x64_sys_call+0x1211/0x20d0\n do_syscall_64+0x9e/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f5b28f165d7\nCode: b3 66 90 48 8b 05 b1 48 2d 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 81 48 2d 00 8\nRSP: 002b:00007ffc2b59c5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b28f165d7\nRDX: 0000000000000000 RSI: 00000000000054e3 RDI: 0000000000000003\nRBP: 00007ffc2b59c650 R08: 00007f5b291ed8c0 R09: 00007f5b2961a4c0\nR10: 0000000029690010 R11: 0000000000000246 R12: 0000000000400730\nR13: 00007ffc2b59cf40 R14: 0000000000000000 R15: 0000000000000000\n \u003c/TASK\u003e\nKernel panic - not syncing: kernel: panic_on_warn set ...\n\nThis is trigger as below:\n ns0 ns1\ntun_set_iff() //dev is tun0\n tun-\u003edev = dev\n//ip link set tun0 netns ns1\n put_net() //ref is 0\n__tun_chr_ioctl() //TUNGETDEVNETNS\n net = dev_net(tun-\u003edev);\n open_related_ns(\u0026net-\u003ens, get_net_ns); //ns1\n get_net_ns()\n get_net() //addition on 0\n\nUse maybe_get_net() in get_net_ns in case net\u0027s ref is zero to fix this",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40958",
"url": "https://www.suse.com/security/cve/CVE-2024-40958"
},
{
"category": "external",
"summary": "SUSE Bug 1227812 for CVE-2024-40958",
"url": "https://bugzilla.suse.com/1227812"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40958"
},
{
"cve": "CVE-2024-40961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40961"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: prevent possible NULL deref in fib6_nh_init()\n\nsyzbot reminds us that in6_dev_get() can return NULL.\n\nfib6_nh_init()\n ip6_validate_gw( \u0026idev )\n ip6_route_check_nh( idev )\n *idev = in6_dev_get(dev); // can be NULL\n\nOops: general protection fault, probably for non-canonical address 0xdffffc00000000bc: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x00000000000005e0-0x00000000000005e7]\nCPU: 0 PID: 11237 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n RIP: 0010:fib6_nh_init+0x640/0x2160 net/ipv6/route.c:3606\nCode: 00 00 fc ff df 4c 8b 64 24 58 48 8b 44 24 28 4c 8b 74 24 30 48 89 c1 48 89 44 24 28 48 8d 98 e0 05 00 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 0f b6 04 38 84 c0 0f 85 b3 17 00 00 8b 1b 31 ff 89 de e8 b8 8b\nRSP: 0018:ffffc900032775a0 EFLAGS: 00010202\nRAX: 00000000000000bc RBX: 00000000000005e0 RCX: 0000000000000000\nRDX: 0000000000000010 RSI: ffffc90003277a54 RDI: ffff88802b3a08d8\nRBP: ffffc900032778b0 R08: 00000000000002fc R09: 0000000000000000\nR10: 00000000000002fc R11: 0000000000000000 R12: ffff88802b3a08b8\nR13: 1ffff9200064eec8 R14: ffffc90003277a00 R15: dffffc0000000000\nFS: 00007f940feb06c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 00000000245e8000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n ip6_route_info_create+0x99e/0x12b0 net/ipv6/route.c:3809\n ip6_route_add+0x28/0x160 net/ipv6/route.c:3853\n ipv6_route_ioctl+0x588/0x870 net/ipv6/route.c:4483\n inet6_ioctl+0x21a/0x280 net/ipv6/af_inet6.c:579\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f940f07cea9",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40961",
"url": "https://www.suse.com/security/cve/CVE-2024-40961"
},
{
"category": "external",
"summary": "SUSE Bug 1227814 for CVE-2024-40961",
"url": "https://bugzilla.suse.com/1227814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.31.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.31.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.31.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40961"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…