RHSA-2024:6567
Vulnerability from csaf_opensuse - Published: 2024-09-11 00:00 - Updated: 2026-09-20 11:42Summary
security update for kernel
Severity
Low
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:6567.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:6567.
Patchnames: RHSA-2024:6567
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52463
Threats
Impact
moderate
References
88 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:6567.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:6567.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:6567",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_6567.json"
},
{
"category": "self",
"summary": "URL for RHSA-2024:6567",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-September/000022.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2024:6567",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-September/000022.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52463 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52801 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26720 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26886 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35797 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35875 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36000 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36019 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36883 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36979 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38559 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40927 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41040 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41044 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41055 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41073 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41096 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42082 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42096 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42102 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42131 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42131/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:42:34Z",
"generator": {
"date": "2024-09-11T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:6567",
"initial_release_date": "2024-09-11T00:00:00Z",
"revision_history": [
{
"date": "2024-09-11T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:42:34Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-427.35.1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"product_id": "kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-427.35.1.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"product": {
"name": "bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"product_id": "bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.3.0-427.35.1.el9_4?arch=x86_64\u0026upstream=bpftool-0:7.3.0-427.35.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-427.35.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.35.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-427.35.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.35.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-427.35.1.el9_4?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-427.35.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "perf-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "perf-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-427.35.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.35.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-427.35.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.35.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-427.35.1.el9_4.x86_64",
"product": {
"name": "rv-0:5.14.0-427.35.1.el9_4.x86_64",
"product_id": "rv-0:5.14.0-427.35.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-427.35.1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.3.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64"
},
"product_reference": "bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-427.35.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "perf-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-427.35.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
},
"product_reference": "rv-0:5.14.0-427.35.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52463"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: force RO when remounting if SetVariable is not supported\n\nIf SetVariable at runtime is not supported by the firmware we never assign\na callback for that function. At the same time mount the efivarfs as\nRO so no one can call that. However, we never check the permission flags\nwhen someone remounts the filesystem as RW. As a result this leads to a\ncrash looking like this:\n\n$ mount -o remount,rw /sys/firmware/efi/efivars\n$ efi-updatevar -f PK.auth PK\n\n[ 303.279166] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n[ 303.280482] Mem abort info:\n[ 303.280854] ESR = 0x0000000086000004\n[ 303.281338] EC = 0x21: IABT (current EL), IL = 32 bits\n[ 303.282016] SET = 0, FnV = 0\n[ 303.282414] EA = 0, S1PTW = 0\n[ 303.282821] FSC = 0x04: level 0 translation fault\n[ 303.283771] user pgtable: 4k pages, 48-bit VAs, pgdp=000000004258c000\n[ 303.284913] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n[ 303.286076] Internal error: Oops: 0000000086000004 [#1] PREEMPT SMP\n[ 303.286936] Modules linked in: qrtr tpm_tis tpm_tis_core crct10dif_ce arm_smccc_trng rng_core drm fuse ip_tables x_tables ipv6\n[ 303.288586] CPU: 1 PID: 755 Comm: efi-updatevar Not tainted 6.3.0-rc1-00108-gc7d0c4695c68 #1\n[ 303.289748] Hardware name: Unknown Unknown Product/Unknown Product, BIOS 2023.04-00627-g88336918701d 04/01/2023\n[ 303.291150] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 303.292123] pc : 0x0\n[ 303.292443] lr : efivar_set_variable_locked+0x74/0xec\n[ 303.293156] sp : ffff800008673c10\n[ 303.293619] x29: ffff800008673c10 x28: ffff0000037e8000 x27: 0000000000000000\n[ 303.294592] x26: 0000000000000800 x25: ffff000002467400 x24: 0000000000000027\n[ 303.295572] x23: ffffd49ea9832000 x22: ffff0000020c9800 x21: ffff000002467000\n[ 303.296566] x20: 0000000000000001 x19: 00000000000007fc x18: 0000000000000000\n[ 303.297531] x17: 0000000000000000 x16: 0000000000000000 x15: 0000aaaac807ab54\n[ 303.298495] x14: ed37489f673633c0 x13: 71c45c606de13f80 x12: 47464259e219acf4\n[ 303.299453] x11: ffff000002af7b01 x10: 0000000000000003 x9 : 0000000000000002\n[ 303.300431] x8 : 0000000000000010 x7 : ffffd49ea8973230 x6 : 0000000000a85201\n[ 303.301412] x5 : 0000000000000000 x4 : ffff0000020c9800 x3 : 00000000000007fc\n[ 303.302370] x2 : 0000000000000027 x1 : ffff000002467400 x0 : ffff000002467000\n[ 303.303341] Call trace:\n[ 303.303679] 0x0\n[ 303.303938] efivar_entry_set_get_size+0x98/0x16c\n[ 303.304585] efivarfs_file_write+0xd0/0x1a4\n[ 303.305148] vfs_write+0xc4/0x2e4\n[ 303.305601] ksys_write+0x70/0x104\n[ 303.306073] __arm64_sys_write+0x1c/0x28\n[ 303.306622] invoke_syscall+0x48/0x114\n[ 303.307156] el0_svc_common.constprop.0+0x44/0xec\n[ 303.307803] do_el0_svc+0x38/0x98\n[ 303.308268] el0_svc+0x2c/0x84\n[ 303.308702] el0t_64_sync_handler+0xf4/0x120\n[ 303.309293] el0t_64_sync+0x190/0x194\n[ 303.309794] Code: ???????? ???????? ???????? ???????? (????????)\n[ 303.310612] ---[ end trace 0000000000000000 ]---\n\nFix this by adding a .reconfigure() function to the fs operations which\nwe can use to check the requested flags and deny anything that\u0027s not RO\nif the firmware doesn\u0027t implement SetVariable at runtime.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52463",
"url": "https://www.suse.com/security/cve/CVE-2023-52463"
},
{
"category": "external",
"summary": "SUSE Bug 1220328 for CVE-2023-52463",
"url": "https://bugzilla.suse.com/1220328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52463"
},
{
"cve": "CVE-2023-52801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Fix missing update of domains_itree after splitting iopt_area\n\nIn iopt_area_split(), if the original iopt_area has filled a domain and is\nlinked to domains_itree, pages_nodes have to be properly\nreinserted. Otherwise the domains_itree becomes corrupted and we will UAF.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52801",
"url": "https://www.suse.com/security/cve/CVE-2023-52801"
},
{
"category": "external",
"summary": "SUSE Bug 1225006 for CVE-2023-52801",
"url": "https://bugzilla.suse.com/1225006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52801"
},
{
"cve": "CVE-2024-26629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix RELEASE_LOCKOWNER\n\nThe test on so_count in nfsd4_release_lockowner() is nonsense and\nharmful. Revert to using check_for_locks(), changing that to not sleep.\n\nFirst: harmful.\nAs is documented in the kdoc comment for nfsd4_release_lockowner(), the\ntest on so_count can transiently return a false positive resulting in a\nreturn of NFS4ERR_LOCKS_HELD when in fact no locks are held. This is\nclearly a protocol violation and with the Linux NFS client it can cause\nincorrect behaviour.\n\nIf RELEASE_LOCKOWNER is sent while some other thread is still\nprocessing a LOCK request which failed because, at the time that request\nwas received, the given owner held a conflicting lock, then the nfsd\nthread processing that LOCK request can hold a reference (conflock) to\nthe lock owner that causes nfsd4_release_lockowner() to return an\nincorrect error.\n\nThe Linux NFS client ignores that NFS4ERR_LOCKS_HELD error because it\nnever sends NFS4_RELEASE_LOCKOWNER without first releasing any locks, so\nit knows that the error is impossible. It assumes the lock owner was in\nfact released so it feels free to use the same lock owner identifier in\nsome later locking request.\n\nWhen it does reuse a lock owner identifier for which a previous RELEASE\nfailed, it will naturally use a lock_seqid of zero. However the server,\nwhich didn\u0027t release the lock owner, will expect a larger lock_seqid and\nso will respond with NFS4ERR_BAD_SEQID.\n\nSo clearly it is harmful to allow a false positive, which testing\nso_count allows.\n\nThe test is nonsense because ... well... it doesn\u0027t mean anything.\n\nso_count is the sum of three different counts.\n1/ the set of states listed on so_stateids\n2/ the set of active vfs locks owned by any of those states\n3/ various transient counts such as for conflicting locks.\n\nWhen it is tested against \u00272\u0027 it is clear that one of these is the\ntransient reference obtained by find_lockowner_str_locked(). It is not\nclear what the other one is expected to be.\n\nIn practice, the count is often 2 because there is precisely one state\non so_stateids. If there were more, this would fail.\n\nIn my testing I see two circumstances when RELEASE_LOCKOWNER is called.\nIn one case, CLOSE is called before RELEASE_LOCKOWNER. That results in\nall the lock states being removed, and so the lockowner being discarded\n(it is removed when there are no more references which usually happens\nwhen the lock state is discarded). When nfsd4_release_lockowner() finds\nthat the lock owner doesn\u0027t exist, it returns success.\n\nThe other case shows an so_count of \u00272\u0027 and precisely one state listed\nin so_stateid. It appears that the Linux client uses a separate lock\nowner for each file resulting in one lock state per lock owner, so this\ntest on \u00272\u0027 is safe. For another client it might not be safe.\n\nSo this patch changes check_for_locks() to use the (newish)\nfind_any_file_locked() so that it doesn\u0027t take a reference on the\nnfs4_file and so never calls nfsd_file_put(), and so never sleeps. With\nthis check is it safe to restore the use of check_for_locks() rather\nthan testing so_count against the mysterious \u00272\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26629",
"url": "https://www.suse.com/security/cve/CVE-2024-26629"
},
{
"category": "external",
"summary": "SUSE Bug 1221379 for CVE-2024-26629",
"url": "https://bugzilla.suse.com/1221379"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26629"
},
{
"cve": "CVE-2024-26630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: cachestat: fix folio read-after-free in cache walk\n\nIn cachestat, we access the folio from the page cache\u0027s xarray to compute\nits page offset, and check for its dirty and writeback flags. However, we\ndo not hold a reference to the folio before performing these actions,\nwhich means the folio can concurrently be released and reused as another\nfolio/page/slab.\n\nGet around this altogether by just using xarray\u0027s existing machinery for\nthe folio page offsets and dirty/writeback states.\n\nThis changes behavior for tmpfs files to now always report zeroes in their\ndirty and writeback counters. This is okay as tmpfs doesn\u0027t follow\nconventional writeback cache behavior: its pages get \"cleaned\" during\nswapout, after which they\u0027re no longer resident etc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26630",
"url": "https://www.suse.com/security/cve/CVE-2024-26630"
},
{
"category": "external",
"summary": "SUSE Bug 1221380 for CVE-2024-26630",
"url": "https://bugzilla.suse.com/1221380"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26630"
},
{
"cve": "CVE-2024-26720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26720"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26720",
"url": "https://www.suse.com/security/cve/CVE-2024-26720"
},
{
"category": "external",
"summary": "SUSE Bug 1222364 for CVE-2024-26720",
"url": "https://bugzilla.suse.com/1222364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26720"
},
{
"cve": "CVE-2024-26886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26886"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: af_bluetooth: Fix deadlock\n\nAttemting to do sock_lock on .recvmsg may cause a deadlock as shown\nbellow, so instead of using sock_sock this uses sk_receive_queue.lock\non bt_sock_ioctl to avoid the UAF:\n\nINFO: task kworker/u9:1:121 blocked for more than 30 seconds.\n Not tainted 6.7.6-lemon #183\nWorkqueue: hci0 hci_rx_work\nCall Trace:\n \u003cTASK\u003e\n __schedule+0x37d/0xa00\n schedule+0x32/0xe0\n __lock_sock+0x68/0xa0\n ? __pfx_autoremove_wake_function+0x10/0x10\n lock_sock_nested+0x43/0x50\n l2cap_sock_recv_cb+0x21/0xa0\n l2cap_recv_frame+0x55b/0x30a0\n ? psi_task_switch+0xeb/0x270\n ? finish_task_switch.isra.0+0x93/0x2a0\n hci_rx_work+0x33a/0x3f0\n process_one_work+0x13a/0x2f0\n worker_thread+0x2f0/0x410\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xe0/0x110\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2c/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26886",
"url": "https://www.suse.com/security/cve/CVE-2024-26886"
},
{
"category": "external",
"summary": "SUSE Bug 1223044 for CVE-2024-26886",
"url": "https://bugzilla.suse.com/1223044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26886"
},
{
"cve": "CVE-2024-26946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address\n\nRead from an unsafe address with copy_from_kernel_nofault() in\narch_adjust_kprobe_addr() because this function is used before checking\nthe address is in text or not. Syzcaller bot found a bug and reported\nthe case if user specifies inaccessible data area,\narch_adjust_kprobe_addr() will cause a kernel panic.\n\n[ mingo: Clarified the comment. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26946",
"url": "https://www.suse.com/security/cve/CVE-2024-26946"
},
{
"category": "external",
"summary": "SUSE Bug 1223669 for CVE-2024-26946",
"url": "https://bugzilla.suse.com/1223669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26946"
},
{
"cve": "CVE-2024-35791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Flush pages under kvm-\u003elock to fix UAF in svm_register_enc_region()\n\nDo the cache flush of converted pages in svm_register_enc_region() before\ndropping kvm-\u003elock to fix use-after-free issues where region and/or its\narray of pages could be freed by a different task, e.g. if userspace has\n__unregister_enc_region_locked() already queued up for the region.\n\nNote, the \"obvious\" alternative of using local variables doesn\u0027t fully\nresolve the bug, as region-\u003epages is also dynamically allocated. I.e. the\nregion structure itself would be fine, but region-\u003epages could be freed.\n\nFlushing multiple pages under kvm-\u003elock is unfortunate, but the entire\nflow is a rare slow path, and the manual flush is only needed on CPUs that\nlack coherency for encrypted memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35791",
"url": "https://www.suse.com/security/cve/CVE-2024-35791"
},
{
"category": "external",
"summary": "SUSE Bug 1224725 for CVE-2024-35791",
"url": "https://bugzilla.suse.com/1224725"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35791"
},
{
"cve": "CVE-2024-35797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35797"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: cachestat: fix two shmem bugs\n\nWhen cachestat on shmem races with swapping and invalidation, there\nare two possible bugs:\n\n1) A swapin error can have resulted in a poisoned swap entry in the\n shmem inode\u0027s xarray. Calling get_shadow_from_swap_cache() on it\n will result in an out-of-bounds access to swapper_spaces[].\n\n Validate the entry with non_swap_entry() before going further.\n\n2) When we find a valid swap entry in the shmem\u0027s inode, the shadow\n entry in the swapcache might not exist yet: swap IO is still in\n progress and we\u0027re before __remove_mapping; swapin, invalidation,\n or swapoff have removed the shadow from swapcache after we saw the\n shmem swap entry.\n\n This will send a NULL to workingset_test_recent(). The latter\n purely operates on pointer bits, so it won\u0027t crash - node 0, memcg\n ID 0, eviction timestamp 0, etc. are all valid inputs - but it\u0027s a\n bogus test. In theory that could result in a false \"recently\n evicted\" count.\n\n Such a false positive wouldn\u0027t be the end of the world. But for\n code clarity and (future) robustness, be explicit about this case.\n\n Bail on get_shadow_from_swap_cache() returning NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35797",
"url": "https://www.suse.com/security/cve/CVE-2024-35797"
},
{
"category": "external",
"summary": "SUSE Bug 1224635 for CVE-2024-35797",
"url": "https://bugzilla.suse.com/1224635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35797"
},
{
"cve": "CVE-2024-35875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35875"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/coco: Require seeding RNG with RDRAND on CoCo systems\n\nThere are few uses of CoCo that don\u0027t rely on working cryptography and\nhence a working RNG. Unfortunately, the CoCo threat model means that the\nVM host cannot be trusted and may actively work against guests to\nextract secrets or manipulate computation. Since a malicious host can\nmodify or observe nearly all inputs to guests, the only remaining source\nof entropy for CoCo guests is RDRAND.\n\nIf RDRAND is broken -- due to CPU hardware fault -- the RNG as a whole\nis meant to gracefully continue on gathering entropy from other sources,\nbut since there aren\u0027t other sources on CoCo, this is catastrophic.\nThis is mostly a concern at boot time when initially seeding the RNG, as\nafter that the consequences of a broken RDRAND are much more\ntheoretical.\n\nSo, try at boot to seed the RNG using 256 bits of RDRAND output. If this\nfails, panic(). This will also trigger if the system is booted without\nRDRAND, as RDRAND is essential for a safe CoCo boot.\n\nAdd this deliberately to be \"just a CoCo x86 driver feature\" and not\npart of the RNG itself. Many device drivers and platforms have some\ndesire to contribute something to the RNG, and add_device_randomness()\nis specifically meant for this purpose.\n\nAny driver can call it with seed data of any quality, or even garbage\nquality, and it can only possibly make the quality of the RNG better or\nhave no effect, but can never make it worse.\n\nRather than trying to build something into the core of the RNG, consider\nthe particular CoCo issue just a CoCo issue, and therefore separate it\nall out into driver (well, arch/platform) code.\n\n [ bp: Massage commit message. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35875",
"url": "https://www.suse.com/security/cve/CVE-2024-35875"
},
{
"category": "external",
"summary": "SUSE Bug 1224665 for CVE-2024-35875",
"url": "https://bugzilla.suse.com/1224665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35875"
},
{
"cve": "CVE-2024-36000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36000"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix missing hugetlb_lock for resv uncharge\n\nThere is a recent report on UFFDIO_COPY over hugetlb:\n\nhttps://lore.kernel.org/all/000000000000ee06de0616177560@google.com/\n\n350:\tlockdep_assert_held(\u0026hugetlb_lock);\n\nShould be an issue in hugetlb but triggered in an userfault context, where\nit goes into the unlikely path where two threads modifying the resv map\ntogether. Mike has a fix in that path for resv uncharge but it looks like\nthe locking criteria was overlooked: hugetlb_cgroup_uncharge_folio_rsvd()\nwill update the cgroup pointer, so it requires to be called with the lock\nheld.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36000",
"url": "https://www.suse.com/security/cve/CVE-2024-36000"
},
{
"category": "external",
"summary": "SUSE Bug 1224548 for CVE-2024-36000",
"url": "https://bugzilla.suse.com/1224548"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36000"
},
{
"cve": "CVE-2024-36019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36019"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nregmap: maple: Fix cache corruption in regcache_maple_drop()\n\nWhen keeping the upper end of a cache block entry, the entry[] array\nmust be indexed by the offset from the base register of the block,\ni.e. max - mas.index.\n\nThe code was indexing entry[] by only the register address, leading\nto an out-of-bounds access that copied some part of the kernel\nmemory over the cache contents.\n\nThis bug was not detected by the regmap KUnit test because it only\ntests with a block of registers starting at 0, so mas.index == 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36019",
"url": "https://www.suse.com/security/cve/CVE-2024-36019"
},
{
"category": "external",
"summary": "SUSE Bug 1225695 for CVE-2024-36019",
"url": "https://bugzilla.suse.com/1225695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36019"
},
{
"cve": "CVE-2024-36883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36883"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix out-of-bounds access in ops_init\n\nnet_alloc_generic is called by net_alloc, which is called without any\nlocking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It\nis read twice, first to allocate an array, then to set s.len, which is\nlater used to limit the bounds of the array access.\n\nIt is possible that the array is allocated and another thread is\nregistering a new pernet ops, increments max_gen_ptrs, which is then used\nto set s.len with a larger than allocated length for the variable array.\n\nFix it by reading max_gen_ptrs only once in net_alloc_generic. If\nmax_gen_ptrs is later incremented, it will be caught in net_assign_generic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36883",
"url": "https://www.suse.com/security/cve/CVE-2024-36883"
},
{
"category": "external",
"summary": "SUSE Bug 1225725 for CVE-2024-36883",
"url": "https://bugzilla.suse.com/1225725"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36883"
},
{
"cve": "CVE-2024-36979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36979"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mst: fix vlan use-after-free\n\nsyzbot reported a suspicious rcu usage[1] in bridge\u0027s mst code. While\nfixing it I noticed that nothing prevents a vlan to be freed while\nwalking the list from the same path (br forward delay timer). Fix the rcu\nusage and also make sure we are not accessing freed memory by making\nbr_mst_vlan_set_state use rcu read lock.\n\n[1]\n WARNING: suspicious RCU usage\n 6.9.0-rc6-syzkaller #0 Not tainted\n -----------------------------\n net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage!\n ...\n stack backtrace:\n CPU: 1 PID: 8017 Comm: syz-executor.1 Not tainted 6.9.0-rc6-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024\n Call Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114\n lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712\n nbp_vlan_group net/bridge/br_private.h:1599 [inline]\n br_mst_set_state+0x1ea/0x650 net/bridge/br_mst.c:105\n br_set_state+0x28a/0x7b0 net/bridge/br_stp.c:47\n br_forward_delay_timer_expired+0x176/0x440 net/bridge/br_stp_timer.c:88\n call_timer_fn+0x18e/0x650 kernel/time/timer.c:1793\n expire_timers kernel/time/timer.c:1844 [inline]\n __run_timers kernel/time/timer.c:2418 [inline]\n __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2429\n run_timer_base kernel/time/timer.c:2438 [inline]\n run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2448\n __do_softirq+0x2c6/0x980 kernel/softirq.c:554\n invoke_softirq kernel/softirq.c:428 [inline]\n __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633\n irq_exit_rcu+0x9/0x30 kernel/softirq.c:645\n instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]\n sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702\n RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758\n Code: 2b 00 74 08 4c 89 f7 e8 ba d1 84 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 \u003c4b\u003e c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25\n RSP: 0018:ffffc90013657100 EFLAGS: 00000206\n RAX: 0000000000000001 RBX: 1ffff920026cae2c RCX: 0000000000000001\n RDX: dffffc0000000000 RSI: ffffffff8bcaca00 RDI: ffffffff8c1eaa60\n RBP: ffffc90013657260 R08: ffffffff92efe507 R09: 1ffffffff25dfca0\n R10: dffffc0000000000 R11: fffffbfff25dfca1 R12: 1ffff920026cae28\n R13: dffffc0000000000 R14: ffffc90013657160 R15: 0000000000000246",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36979",
"url": "https://www.suse.com/security/cve/CVE-2024-36979"
},
{
"category": "external",
"summary": "SUSE Bug 1226604 for CVE-2024-36979",
"url": "https://bugzilla.suse.com/1226604"
},
{
"category": "external",
"summary": "SUSE Bug 1227369 for CVE-2024-36979",
"url": "https://bugzilla.suse.com/1227369"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-36979"
},
{
"cve": "CVE-2024-38559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38559"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Ensure the copied buf is NUL terminated\n\nCurrently, we allocate a count-sized kernel buffer and copy count from\nuserspace to that buffer. Later, we use kstrtouint on this buffer but we\ndon\u0027t ensure that the string is terminated inside the buffer, this can\nlead to OOB read when using kstrtouint. Fix this issue by using\nmemdup_user_nul instead of memdup_user.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38559",
"url": "https://www.suse.com/security/cve/CVE-2024-38559"
},
{
"category": "external",
"summary": "SUSE Bug 1226785 for CVE-2024-38559",
"url": "https://bugzilla.suse.com/1226785"
},
{
"category": "external",
"summary": "SUSE Bug 1227495 for CVE-2024-38559",
"url": "https://bugzilla.suse.com/1227495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38559"
},
{
"cve": "CVE-2024-38619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb-storage: alauda: Check whether the media is initialized\n\nThe member \"uzonesize\" of struct alauda_info will remain 0\nif alauda_init_media() fails, potentially causing divide errors\nin alauda_read_data() and alauda_write_lba().\n- Add a member \"media_initialized\" to struct alauda_info.\n- Change a condition in alauda_check_media() to ensure the\n first initialization.\n- Add an error check for the return value of alauda_init_media().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38619",
"url": "https://www.suse.com/security/cve/CVE-2024-38619"
},
{
"category": "external",
"summary": "SUSE Bug 1226861 for CVE-2024-38619",
"url": "https://bugzilla.suse.com/1226861"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38619"
},
{
"cve": "CVE-2024-40927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40927"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxhci: Handle TD clearing for multiple streams case\n\nWhen multiple streams are in use, multiple TDs might be in flight when\nan endpoint is stopped. We need to issue a Set TR Dequeue Pointer for\neach, to ensure everything is reset properly and the caches cleared.\nChange the logic so that any N\u003e1 TDs found active for different streams\nare deferred until after the first one is processed, calling\nxhci_invalidate_cancelled_tds() again from xhci_handle_cmd_set_deq() to\nqueue another command until we are done with all of them. Also change\nthe error/\"should never happen\" paths to ensure we at least clear any\naffected TDs, even if we can\u0027t issue a command to clear the hardware\ncache, and complain loudly with an xhci_warn() if this ever happens.\n\nThis problem case dates back to commit e9df17eb1408 (\"USB: xhci: Correct\nassumptions about number of rings per endpoint.\") early on in the XHCI\ndriver\u0027s life, when stream support was first added.\nIt was then identified but not fixed nor made into a warning in commit\n674f8438c121 (\"xhci: split handling halted endpoints into two steps\"),\nwhich added a FIXME comment for the problem case (without materially\nchanging the behavior as far as I can tell, though the new logic made\nthe problem more obvious).\n\nThen later, in commit 94f339147fc3 (\"xhci: Fix failure to give back some\ncached cancelled URBs.\"), it was acknowledged again.\n\n[Mathias: commit 94f339147fc3 (\"xhci: Fix failure to give back some cached\ncancelled URBs.\") was a targeted regression fix to the previously mentioned\npatch. Users reported issues with usb stuck after unmounting/disconnecting\nUAS devices. This rolled back the TD clearing of multiple streams to its\noriginal state.]\n\nApparently the commit author was aware of the problem (yet still chose\nto submit it): It was still mentioned as a FIXME, an xhci_dbg() was\nadded to log the problem condition, and the remaining issue was mentioned\nin the commit description. The choice of making the log type xhci_dbg()\nfor what is, at this point, a completely unhandled and known broken\ncondition is puzzling and unfortunate, as it guarantees that no actual\nusers would see the log in production, thereby making it nigh\nundebuggable (indeed, even if you turn on DEBUG, the message doesn\u0027t\nreally hint at there being a problem at all).\n\nIt took me *months* of random xHC crashes to finally find a reliable\nrepro and be able to do a deep dive debug session, which could all have\nbeen avoided had this unhandled, broken condition been actually reported\nwith a warning, as it should have been as a bug intentionally left in\nunfixed (never mind that it shouldn\u0027t have been left in at all).\n\n\u003e Another fix to solve clearing the caches of all stream rings with\n\u003e cancelled TDs is needed, but not as urgent.\n\n3 years after that statement and 14 years after the original bug was\nintroduced, I think it\u0027s finally time to fix it. And maybe next time\nlet\u0027s not leave bugs unfixed (that are actually worse than the original\nbug), and let\u0027s actually get people to review kernel commits please.\n\nFixes xHC crashes and IOMMU faults with UAS devices when handling\nerrors/faults. Easiest repro is to use `hdparm` to mark an early sector\n(e.g. 1024) on a disk as bad, then `cat /dev/sdX \u003e /dev/null` in a loop.\nAt least in the case of JMicron controllers, the read errors end up\nhaving to cancel two TDs (for two queued requests to different streams)\nand the one that didn\u0027t get cleared properly ends up faulting the xHC\nentirely when it tries to access DMA pages that have since been unmapped,\nreferred to by the stale TDs. This normally happens quickly (after two\nor three loops). After this fix, I left the `cat` in a loop running\novernight and experienced no xHC failures, with all read errors\nrecovered properly. Repro\u0027d and tested on an Apple M1 Mac Mini\n(dwc3 host).\n\nOn systems without an IOMMU, this bug would instead silently corrupt\nfreed memory, making this a\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40927",
"url": "https://www.suse.com/security/cve/CVE-2024-40927"
},
{
"category": "external",
"summary": "SUSE Bug 1227816 for CVE-2024-40927",
"url": "https://bugzilla.suse.com/1227816"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40927"
},
{
"cve": "CVE-2024-40936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/region: Fix memregion leaks in devm_cxl_add_region()\n\nMove the mode verification to __create_region() before allocating the\nmemregion to avoid the memregion leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40936",
"url": "https://www.suse.com/security/cve/CVE-2024-40936"
},
{
"category": "external",
"summary": "SUSE Bug 1227833 for CVE-2024-40936",
"url": "https://bugzilla.suse.com/1227833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40936"
},
{
"cve": "CVE-2024-41040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41040"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Fix UAF when resolving a clash\n\nKASAN reports the following UAF:\n\n BUG: KASAN: slab-use-after-free in tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct]\n Read of size 1 at addr ffff888c07603600 by task handler130/6469\n\n Call Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x48/0x70\n print_address_description.constprop.0+0x33/0x3d0\n print_report+0xc0/0x2b0\n kasan_report+0xd0/0x120\n __asan_load1+0x6c/0x80\n tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct]\n tcf_ct_act+0x886/0x1350 [act_ct]\n tcf_action_exec+0xf8/0x1f0\n fl_classify+0x355/0x360 [cls_flower]\n __tcf_classify+0x1fd/0x330\n tcf_classify+0x21c/0x3c0\n sch_handle_ingress.constprop.0+0x2c5/0x500\n __netif_receive_skb_core.constprop.0+0xb25/0x1510\n __netif_receive_skb_list_core+0x220/0x4c0\n netif_receive_skb_list_internal+0x446/0x620\n napi_complete_done+0x157/0x3d0\n gro_cell_poll+0xcf/0x100\n __napi_poll+0x65/0x310\n net_rx_action+0x30c/0x5c0\n __do_softirq+0x14f/0x491\n __irq_exit_rcu+0x82/0xc0\n irq_exit_rcu+0xe/0x20\n common_interrupt+0xa1/0xb0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_common_interrupt+0x27/0x40\n\n Allocated by task 6469:\n kasan_save_stack+0x38/0x70\n kasan_set_track+0x25/0x40\n kasan_save_alloc_info+0x1e/0x40\n __kasan_krealloc+0x133/0x190\n krealloc+0xaa/0x130\n nf_ct_ext_add+0xed/0x230 [nf_conntrack]\n tcf_ct_act+0x1095/0x1350 [act_ct]\n tcf_action_exec+0xf8/0x1f0\n fl_classify+0x355/0x360 [cls_flower]\n __tcf_classify+0x1fd/0x330\n tcf_classify+0x21c/0x3c0\n sch_handle_ingress.constprop.0+0x2c5/0x500\n __netif_receive_skb_core.constprop.0+0xb25/0x1510\n __netif_receive_skb_list_core+0x220/0x4c0\n netif_receive_skb_list_internal+0x446/0x620\n napi_complete_done+0x157/0x3d0\n gro_cell_poll+0xcf/0x100\n __napi_poll+0x65/0x310\n net_rx_action+0x30c/0x5c0\n __do_softirq+0x14f/0x491\n\n Freed by task 6469:\n kasan_save_stack+0x38/0x70\n kasan_set_track+0x25/0x40\n kasan_save_free_info+0x2b/0x60\n ____kasan_slab_free+0x180/0x1f0\n __kasan_slab_free+0x12/0x30\n slab_free_freelist_hook+0xd2/0x1a0\n __kmem_cache_free+0x1a2/0x2f0\n kfree+0x78/0x120\n nf_conntrack_free+0x74/0x130 [nf_conntrack]\n nf_ct_destroy+0xb2/0x140 [nf_conntrack]\n __nf_ct_resolve_clash+0x529/0x5d0 [nf_conntrack]\n nf_ct_resolve_clash+0xf6/0x490 [nf_conntrack]\n __nf_conntrack_confirm+0x2c6/0x770 [nf_conntrack]\n tcf_ct_act+0x12ad/0x1350 [act_ct]\n tcf_action_exec+0xf8/0x1f0\n fl_classify+0x355/0x360 [cls_flower]\n __tcf_classify+0x1fd/0x330\n tcf_classify+0x21c/0x3c0\n sch_handle_ingress.constprop.0+0x2c5/0x500\n __netif_receive_skb_core.constprop.0+0xb25/0x1510\n __netif_receive_skb_list_core+0x220/0x4c0\n netif_receive_skb_list_internal+0x446/0x620\n napi_complete_done+0x157/0x3d0\n gro_cell_poll+0xcf/0x100\n __napi_poll+0x65/0x310\n net_rx_action+0x30c/0x5c0\n __do_softirq+0x14f/0x491\n\nThe ct may be dropped if a clash has been resolved but is still passed to\nthe tcf_ct_flow_table_process_conn function for further usage. This issue\ncan be fixed by retrieving ct from skb again after confirming conntrack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41040",
"url": "https://www.suse.com/security/cve/CVE-2024-41040"
},
{
"category": "external",
"summary": "SUSE Bug 1228518 for CVE-2024-41040",
"url": "https://bugzilla.suse.com/1228518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41040"
},
{
"cve": "CVE-2024-41044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41044"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nppp: reject claimed-as-LCP but actually malformed packets\n\nSince \u0027ppp_async_encode()\u0027 assumes valid LCP packets (with code\nfrom 1 to 7 inclusive), add \u0027ppp_check_packet()\u0027 to ensure that\nLCP packet has an actual body beyond PPP_LCP header bytes, and\nreject claimed-as-LCP but actually malformed data otherwise.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41044",
"url": "https://www.suse.com/security/cve/CVE-2024-41044"
},
{
"category": "external",
"summary": "SUSE Bug 1228530 for CVE-2024-41044",
"url": "https://bugzilla.suse.com/1228530"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41044"
},
{
"cve": "CVE-2024-41055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41055"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: prevent derefencing NULL ptr in pfn_section_valid()\n\nCommit 5ec8e8ea8b77 (\"mm/sparsemem: fix race in accessing\nmemory_section-\u003eusage\") changed pfn_section_valid() to add a READ_ONCE()\ncall around \"ms-\u003eusage\" to fix a race with section_deactivate() where\nms-\u003eusage can be cleared. The READ_ONCE() call, by itself, is not enough\nto prevent NULL pointer dereference. We need to check its value before\ndereferencing it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41055",
"url": "https://www.suse.com/security/cve/CVE-2024-41055"
},
{
"category": "external",
"summary": "SUSE Bug 1228521 for CVE-2024-41055",
"url": "https://bugzilla.suse.com/1228521"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41055"
},
{
"cve": "CVE-2024-41073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41073"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: avoid double free special payload\n\nIf a discard request needs to be retried, and that retry may fail before\na new special payload is added, a double free will result. Clear the\nRQF_SPECIAL_LOAD when the request is cleaned.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41073",
"url": "https://www.suse.com/security/cve/CVE-2024-41073"
},
{
"category": "external",
"summary": "SUSE Bug 1228635 for CVE-2024-41073",
"url": "https://bugzilla.suse.com/1228635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41073"
},
{
"cve": "CVE-2024-41096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41096"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Fix UAF in msi_capability_init\n\nKFENCE reports the following UAF:\n\n BUG: KFENCE: use-after-free read in __pci_enable_msi_range+0x2c0/0x488\n\n Use-after-free read at 0x0000000024629571 (in kfence-#12):\n __pci_enable_msi_range+0x2c0/0x488\n pci_alloc_irq_vectors_affinity+0xec/0x14c\n pci_alloc_irq_vectors+0x18/0x28\n\n kfence-#12: 0x0000000008614900-0x00000000e06c228d, size=104, cache=kmalloc-128\n\n allocated by task 81 on cpu 7 at 10.808142s:\n __kmem_cache_alloc_node+0x1f0/0x2bc\n kmalloc_trace+0x44/0x138\n msi_alloc_desc+0x3c/0x9c\n msi_domain_insert_msi_desc+0x30/0x78\n msi_setup_msi_desc+0x13c/0x184\n __pci_enable_msi_range+0x258/0x488\n pci_alloc_irq_vectors_affinity+0xec/0x14c\n pci_alloc_irq_vectors+0x18/0x28\n\n freed by task 81 on cpu 7 at 10.811436s:\n msi_domain_free_descs+0xd4/0x10c\n msi_domain_free_locked.part.0+0xc0/0x1d8\n msi_domain_alloc_irqs_all_locked+0xb4/0xbc\n pci_msi_setup_msi_irqs+0x30/0x4c\n __pci_enable_msi_range+0x2a8/0x488\n pci_alloc_irq_vectors_affinity+0xec/0x14c\n pci_alloc_irq_vectors+0x18/0x28\n\nDescriptor allocation done in:\n__pci_enable_msi_range\n msi_capability_init\n msi_setup_msi_desc\n msi_insert_msi_desc\n msi_domain_insert_msi_desc\n msi_alloc_desc\n ...\n\nFreed in case of failure in __msi_domain_alloc_locked()\n__pci_enable_msi_range\n msi_capability_init\n pci_msi_setup_msi_irqs\n msi_domain_alloc_irqs_all_locked\n msi_domain_alloc_locked\n __msi_domain_alloc_locked =\u003e fails\n msi_domain_free_locked\n ...\n\nThat failure propagates back to pci_msi_setup_msi_irqs() in\nmsi_capability_init() which accesses the descriptor for unmasking in the\nerror exit path.\n\nCure it by copying the descriptor and using the copy for the error exit path\nunmask operation.\n\n[ tglx: Massaged change log ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41096",
"url": "https://www.suse.com/security/cve/CVE-2024-41096"
},
{
"category": "external",
"summary": "SUSE Bug 1228479 for CVE-2024-41096",
"url": "https://bugzilla.suse.com/1228479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41096"
},
{
"cve": "CVE-2024-42082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42082"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxdp: Remove WARN() from __xdp_reg_mem_model()\n\nsyzkaller reports a warning in __xdp_reg_mem_model().\n\nThe warning occurs only if __mem_id_init_hash_table() returns an error. It\nreturns the error in two cases:\n\n 1. memory allocation fails;\n 2. rhashtable_init() fails when some fields of rhashtable_params\n struct are not initialized properly.\n\nThe second case cannot happen since there is a static const rhashtable_params\nstruct with valid fields. So, warning is only triggered when there is a\nproblem with memory allocation.\n\nThus, there is no sense in using WARN() to handle this error and it can be\nsafely removed.\n\nWARNING: CPU: 0 PID: 5065 at net/core/xdp.c:299 __xdp_reg_mem_model+0x2d9/0x650 net/core/xdp.c:299\n\nCPU: 0 PID: 5065 Comm: syz-executor883 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024\nRIP: 0010:__xdp_reg_mem_model+0x2d9/0x650 net/core/xdp.c:299\n\nCall Trace:\n xdp_reg_mem_model+0x22/0x40 net/core/xdp.c:344\n xdp_test_run_setup net/bpf/test_run.c:188 [inline]\n bpf_test_run_xdp_live+0x365/0x1e90 net/bpf/test_run.c:377\n bpf_prog_test_run_xdp+0x813/0x11b0 net/bpf/test_run.c:1267\n bpf_prog_test_run+0x33a/0x3b0 kernel/bpf/syscall.c:4240\n __sys_bpf+0x48d/0x810 kernel/bpf/syscall.c:5649\n __do_sys_bpf kernel/bpf/syscall.c:5738 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5736 [inline]\n __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5736\n do_syscall_64+0xfb/0x240\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nFound by Linux Verification Center (linuxtesting.org) with syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42082",
"url": "https://www.suse.com/security/cve/CVE-2024-42082"
},
{
"category": "external",
"summary": "SUSE Bug 1228482 for CVE-2024-42082",
"url": "https://bugzilla.suse.com/1228482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42082"
},
{
"cve": "CVE-2024-42096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42096"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86: stop playing stack games in profile_pc()\n\nThe \u0027profile_pc()\u0027 function is used for timer-based profiling, which\nisn\u0027t really all that relevant any more to begin with, but it also ends\nup making assumptions based on the stack layout that aren\u0027t necessarily\nvalid.\n\nBasically, the code tries to account the time spent in spinlocks to the\ncaller rather than the spinlock, and while I support that as a concept,\nit\u0027s not worth the code complexity or the KASAN warnings when no serious\nprofiling is done using timers anyway these days.\n\nAnd the code really does depend on stack layout that is only true in the\nsimplest of cases. We\u0027ve lost the comment at some point (I think when\nthe 32-bit and 64-bit code was unified), but it used to say:\n\n\tAssume the lock function has either no stack frame or a copy\n\tof eflags from PUSHF.\n\nwhich explains why it just blindly loads a word or two straight off the\nstack pointer and then takes a minimal look at the values to just check\nif they might be eflags or the return pc:\n\n\tEflags always has bits 22 and up cleared unlike kernel addresses\n\nbut that basic stack layout assumption assumes that there isn\u0027t any lock\ndebugging etc going on that would complicate the code and cause a stack\nframe.\n\nIt causes KASAN unhappiness reported for years by syzkaller [1] and\nothers [2].\n\nWith no real practical reason for this any more, just remove the code.\n\nJust for historical interest, here\u0027s some background commits relating to\nthis code from 2006:\n\n 0cb91a229364 (\"i386: Account spinlocks to the caller during profiling for !FP kernels\")\n 31679f38d886 (\"Simplify profile_pc on x86-64\")\n\nand a code unification from 2009:\n\n ef4512882dbe (\"x86: time_32/64.c unify profile_pc\")\n\nbut the basics of this thing actually goes back to before the git tree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42096",
"url": "https://www.suse.com/security/cve/CVE-2024-42096"
},
{
"category": "external",
"summary": "SUSE Bug 1228633 for CVE-2024-42096",
"url": "https://bugzilla.suse.com/1228633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42096"
},
{
"cve": "CVE-2024-42102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42102"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\"\n\nPatch series \"mm: Avoid possible overflows in dirty throttling\".\n\nDirty throttling logic assumes dirty limits in page units fit into\n32-bits. This patch series makes sure this is true (see patch 2/2 for\nmore details).\n\n\nThis patch (of 2):\n\nThis reverts commit 9319b647902cbd5cc884ac08a8a6d54ce111fc78.\n\nThe commit is broken in several ways. Firstly, the removed (u64) cast\nfrom the multiplication will introduce a multiplication overflow on 32-bit\narchs if wb_thresh * bg_thresh \u003e= 1\u003c\u003c32 (which is actually common - the\ndefault settings with 4GB of RAM will trigger this). Secondly, the\ndiv64_u64() is unnecessarily expensive on 32-bit archs. We have\ndiv64_ul() in case we want to be safe \u0026 cheap. Thirdly, if dirty\nthresholds are larger than 1\u003c\u003c32 pages, then dirty balancing is going to\nblow up in many other spectacular ways anyway so trying to fix one\npossible overflow is just moot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42102",
"url": "https://www.suse.com/security/cve/CVE-2024-42102"
},
{
"category": "external",
"summary": "SUSE Bug 1222364 for CVE-2024-42102",
"url": "https://bugzilla.suse.com/1222364"
},
{
"category": "external",
"summary": "SUSE Bug 1233132 for CVE-2024-42102",
"url": "https://bugzilla.suse.com/1233132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42102"
},
{
"cve": "CVE-2024-42131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: avoid overflows in dirty throttling logic\n\nThe dirty throttling logic is interspersed with assumptions that dirty\nlimits in PAGE_SIZE units fit into 32-bit (so that various multiplications\nfit into 64-bits). If limits end up being larger, we will hit overflows,\npossible divisions by 0 etc. Fix these problems by never allowing so\nlarge dirty limits as they have dubious practical value anyway. For\ndirty_bytes / dirty_background_bytes interfaces we can just refuse to set\nso large limits. For dirty_ratio / dirty_background_ratio it isn\u0027t so\nsimple as the dirty limit is computed from the amount of available memory\nwhich can change due to memory hotplug etc. So when converting dirty\nlimits from ratios to numbers of pages, we just don\u0027t allow the result to\nexceed UINT_MAX.\n\nThis is root-only triggerable problem which occurs when the operator\nsets dirty limits to \u003e16 TB.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42131",
"url": "https://www.suse.com/security/cve/CVE-2024-42131"
},
{
"category": "external",
"summary": "SUSE Bug 1228650 for CVE-2024-42131",
"url": "https://bugzilla.suse.com/1228650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.35.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.35.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.35.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42131"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…