{
   affected: [],
   aliases: [
      "CVE-2025-21802",
   ],
   database_specific: {
      cwe_ids: [],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2025-02-27T20:16:02Z",
      severity: null,
   },
   details: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix oops when unload drivers paralleling\n\nWhen unload hclge driver, it tries to disable sriov first for each\nae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at\nthe time, because it removes all the ae_dev nodes, and it may cause\noops.\n\nBut we can't simply use hnae3_common_lock for this. Because in the\nprocess flow of pci_disable_sriov(), it will trigger the remove flow\nof VF, which will also take hnae3_common_lock.\n\nTo fixes it, introduce a new mutex to protect the unload process.",
   id: "GHSA-425c-353w-6mvg",
   modified: "2025-03-13T15:32:52Z",
   published: "2025-02-27T21:32:16Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2025-21802",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/622d92a67656e5c4d2d6ccac02d688ed995418c6",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/82736bb83fb0221319c85c2e9917d0189cd84e1e",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/8c640dd3d900cc8988a39c007591f1deee776df4",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/92e5995773774a3e70257e9c95ea03518268bea5",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/b5a8bc47aa0a4aa8bca5466dfa2d12dbb5b3cd0c",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/cafe9a27e22736d4a01b3933e36225f9857c7988",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/e876522659012ef2e73834a0b9f1cbe3f74d5fad",
      },
   ],
   schema_version: "1.4.0",
   severity: [],
}

{
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix oops when unload drivers paralleling\n\nWhen unload hclge driver, it tries to disable sriov first for each\nae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at\nthe time, because it removes all the ae_dev nodes, and it may cause\noops.\n\nBut we can't simply use hnae3_common_lock for this. Because in the\nprocess flow of pci_disable_sriov(), it will trigger the remove flow\nof VF, which will also take hnae3_common_lock.\n\nTo fixes it, introduce a new mutex to protect the unload process.",
      },
      {
         lang: "es",
         value: "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: hns3: se corrige el error al descargar controladores en paralelo. Al descargar el controlador hclge, primero intenta deshabilitar sriov para cada nodo ae_dev de hnae3_ae_dev_list. Si el usuario descarga el controlador hns3 en ese momento, debido a que elimina todos los nodos ae_dev, y puede causar errores. Pero no podemos simplemente usar hnae3_common_lock para esto. Porque en el flujo de proceso de pci_disable_sriov(), activará el flujo de eliminación de VF, que también tomará hnae3_common_lock. Para solucionarlo, introduzca un nuevo mutex para proteger el proceso de descarga.",
      },
   ],
   id: "CVE-2025-21802",
   lastModified: "2025-03-13T13:15:55.727",
   metrics: {},
   published: "2025-02-27T20:16:02.847",
   references: [
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/622d92a67656e5c4d2d6ccac02d688ed995418c6",
      },
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/82736bb83fb0221319c85c2e9917d0189cd84e1e",
      },
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/8c640dd3d900cc8988a39c007591f1deee776df4",
      },
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/92e5995773774a3e70257e9c95ea03518268bea5",
      },
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/b5a8bc47aa0a4aa8bca5466dfa2d12dbb5b3cd0c",
      },
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/cafe9a27e22736d4a01b3933e36225f9857c7988",
      },
      {
         source: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
         url: "https://git.kernel.org/stable/c/e876522659012ef2e73834a0b9f1cbe3f74d5fad",
      },
   ],
   sourceIdentifier: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   vulnStatus: "Awaiting Analysis",
}

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThe SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).\n- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).\n- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).\n- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).\n- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).\n- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).\n- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).\n- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).\n- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).\n- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).\n- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).\n- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).\n- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).\n- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).\n- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).\n- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).\n- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).\n- CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).\n- CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).\n- CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).\n- CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).\n- CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).\n- CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).\n- CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).\n- CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).\n- CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).\n- CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).\n- CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).\n- CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).\n- CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).\n- CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).\n- CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).\n- CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).\n- CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).\n- CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).\n- CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).\n- CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).\n- CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).\n- CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).\n- CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).\n- CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877).\n- CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).\n- CVE-2025-21767: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (bsc#1238509).\n- CVE-2025-21790: vxlan: check vxlan_vnigroup_init() return value (bsc#1238753).\n- CVE-2025-21795: NFSD: fix hang in nfsd4_shutdown_callback (bsc#1238759).\n- CVE-2025-21799: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() (bsc#1238739).\n- CVE-2025-21802: net: hns3: fix oops when unload drivers paralleling (bsc#1238751).\n\nThe following non-security bugs were fixed:\n\n- acct: block access to kernel internal filesystems (git-fixes).\n- acct: perform last write from workqueue (git-fixes).\n- ACPI: PRM: Remove unnecessary strict handler address checks (git-fixes).\n- ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read() (git-fixes).\n- ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (stable-fixes).\n- add nf_tables for iptables non-legacy network handling \n- af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (bsc#1237849).\n- ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (git-fixes).\n- ALSA: hda/cirrus: Correct the full scale volume set logic (git-fixes).\n- ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (stable-fixes).\n- ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (git-fixes).\n- ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (git-fixes).\n- ALSA: hda/realtek: Fixup ALC225 depop procedure (git-fixes).\n- ALSA: seq: Drop UMP events when no UMP-conversion is set (git-fixes).\n- ALSA: seq: Make dependency on UMP clearer (git-fixes).\n- ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT (stable-fixes).\n- ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (git-fixes).\n- ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (stable-fixes).\n- amdgpu/pm/legacy: fix suspend/resume issues (git-fixes).\n- APEI: GHES: Have GHES honor the panic= setting (stable-fixes).\n- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (git-fixes)\n- arm64: Handle .ARM.attributes section in linker scripts (git-fixes)\n- arm64: hugetlb: enable __HAVE_ARCH_FLUSH_HUGETLB_TLB_RANGE (git-fixes)\n- arm64: hugetlb: Fix flush_hugetlb_tlb_range() invalidation level (git-fixes)\n- arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes (git-fixes)\n- arm64/mm: Ensure adequate HUGE_MAX_HSTATE (git-fixes)\n- ASoC: amd: Add ACPI dependency to fix build error (stable-fixes).\n- ASoC: es8328: fix route from DAC to output (git-fixes).\n- ASoC: fsl_micfil: Enable default case in micfil_set_quality() (git-fixes).\n- ASoC: Intel: avs: Abstract IPC handling (stable-fixes).\n- ASoC: Intel: avs: Do not readq() u32 registers (git-fixes).\n- ASoC: Intel: avs: Prefix SKL/APL-specific members (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (stable-fixes).\n- ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (git-fixes).\n- ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (git-fixes).\n- ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (git-fixes).\n- ata: libata-sff: Ensure that we cannot write outside the allocated buffer (stable-fixes).\n- batman-adv: Drop unmanaged ELP metric worker (git-fixes).\n- batman-adv: fix panic during interface removal (git-fixes).\n- batman-adv: Ignore neighbor throughput metrics in error case (stable-fixes).\n- bio-integrity: do not restrict the size of integrity metadata (git-fixes).\n- blk_iocost: remove some duplicate irq disable/enables (git-fixes).\n- blk-cgroup: Fix class @block_class's subsystem refcount leakage (bsc#1237558).\n- blk-cgroup: Properly propagate the iostat update up the hierarchy (bsc#1225606).\n- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (git-fixes).\n- blk-mq: add number of queue calc helper (bsc#1236897).\n- blk-mq: create correct map for fallback case (bsc#1236896).\n- blk-mq: do not count completed flush data request as inflight in case of quiesce (git-fixes).\n- blk-mq: introduce blk_mq_map_hw_queues (bsc#1236896).\n- blk-mq: issue warning when offlining hctx with online isolcpus (bsc#1236897).\n- blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long (git-fixes).\n- blk-mq: move cpuhp callback registering out of q->sysfs_lock (git-fixes).\n- blk-mq: register cpuhp callback after hctx is added to xarray table (git-fixes).\n- blk-mq: use hk cpus only when isolcpus=managed_irq is enabled (bsc#1236897).\n- block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (git-fixes).\n- block: add a disk_has_partscan helper (git-fixes).\n- block: add a partscan sysfs attribute for disks (git-fixes).\n- block: add check of 'minors' and 'first_minor' in device_add_disk() (git-fixes).\n- block: avoid to reuse `hctx` not removed from cpuhp callback list (git-fixes).\n- block: change rq_integrity_vec to respect the iterator (git-fixes).\n- block: Clear zone limits for a non-zoned stacked queue (git-fixes).\n- block: copy back bounce buffer to user-space correctly in case of split (git-fixes).\n- block: ensure we hold a queue reference when using queue limits (git-fixes).\n- block: fix and simplify blkdevparts= cmdline parsing (git-fixes).\n- block: fix bio_split_rw_at to take zone_write_granularity into account (git-fixes).\n- block: Fix elevator_get_default() checking for NULL q->tag_set (git-fixes).\n- block: fix integer overflow in BLKSECDISCARD (git-fixes).\n- block: Fix lockdep warning in blk_mq_mark_tag_wait (git-fixes).\n- block: fix missing dispatching request when queue is started or unquiesced (git-fixes).\n- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (git-fixes).\n- block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding (git-fixes).\n- block: Fix page refcounts for unaligned buffers in __bio_release_pages() (git-fixes).\n- block: fix sanity checks in blk_rq_map_user_bvec (git-fixes).\n- block: propagate partition scanning errors to the BLKRRPART ioctl (git-fixes).\n- block: Provide bdev_open_* functions (git-fixes).\n- block: Remove special-casing of compound pages (git-fixes).\n- block: remove the blk_flush_integrity call in blk_integrity_unregister (git-fixes).\n- block: retry call probe after request_module in blk_request_module (git-fixes).\n- block: return unsigned int from bdev_io_min (git-fixes).\n- block: sed-opal: avoid possible wrong address reference in read_sed_opal_key() (git-fixes).\n- block: Set memalloc_noio to false on device_add_disk() error path (git-fixes).\n- block: support to account io_ticks precisely (git-fixes).\n- block: use the right type for stub rq_integrity_vec() (git-fixes).\n- bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() (git-fixes).\n- bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() (git-fixes).\n- bluetooth: btusb: Initialize .owner field of force_poll_sync_fops (git-fixes).\n- bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response (git-fixes).\n- bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (stable-fixes).\n- bnxt_en: Fix possible memory leak when hwrm_req_replace fails (git-fixes).\n- bnxt_en: Refactor bnxt_ptp_init() (git-fixes).\n- bnxt_en: Unregister PTP during PCI shutdown and suspend (git-fixes).\n- btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1237232).\n- btrfs: fix extent map merging not happening for adjacent extents (bsc#1237232).\n- can: c_can: fix unbalanced runtime PM disable in error path (git-fixes).\n- can: ctucanfd: handle skb allocation failure (git-fixes).\n- can: etas_es58x: fix potential NULL pointer dereference on udev->serial (git-fixes).\n- can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (git-fixes).\n- chelsio/chtls: prevent potential integer overflow on 32bit (git-fixes).\n- cifs: commands that are retried should have replay flag set (bsc#1231432).\n- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (git-fixes).\n- cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path (bsc#1231432).\n- cifs: helper function to check replayable error codes (bsc#1231432).\n- cifs: new mount option called retrans (bsc#1231432).\n- cifs: open_cached_dir should not rely on primary channel (bsc#1231432).\n- cifs: open_cached_dir(): add FILE_READ_EA to desired access (git-fixes).\n- cifs: Remove intermediate object of failed create reparse call (git-fixes).\n- cifs: update desired access while requesting for directory lease (git-fixes).\n- cifs: update the same create_guid on replay (git-fixes).\n- clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe (git-fixes).\n- clk: mediatek: mt2701-bdp: add missing dummy clk (git-fixes).\n- clk: mediatek: mt2701-img: add missing dummy clk (git-fixes).\n- clk: mediatek: mt2701-mm: add missing dummy clk (git-fixes).\n- clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe (git-fixes).\n- clk: qcom: clk-alpha-pll: fix alpha mode configuration (git-fixes).\n- clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (git-fixes).\n- clk: qcom: dispcc-sm6350: Add missing parent_map for a clock (git-fixes).\n- clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg (git-fixes).\n- clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (git-fixes).\n- clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable() (git-fixes).\n- clk: sunxi-ng: a100: enable MMC clock reparenting (git-fixes).\n- cpu/hotplug: Do not offline the last non-isolated CPU (bsc#1237562).\n- cpu/hotplug: Prevent self deadlock on CPU hot-unplug (bsc#1237562).\n- cpufreq: imx6q: Do not disable 792 Mhz OPP unnecessarily (git-fixes).\n- cpufreq: imx6q: do not warn for disabling a non-existing frequency (git-fixes).\n- cpufreq: mediatek-hw: Do not error out if supply is not found (git-fixes).\n- cpufreq: mediatek-hw: Wait for CPU supplies before probing (git-fixes).\n- cpufreq: qcom-nvmem: add support for IPQ8064 (git-fixes).\n- cpufreq: qcom-nvmem: drop pvs_ver for format a fuses (git-fixes).\n- cpufreq: qcom-nvmem: Enable virtual power domain devices (git-fixes).\n- cpufreq: qcom-nvmem: fix memory leaks in probe error paths (git-fixes).\n- cpufreq: qcom-nvmem: Simplify driver data allocation (stable-fixes).\n- cpufreq: qcom-nvmem: use helper to get SMEM SoC ID (git-fixes).\n- cpufreq: qcom-nvmem: use SoC ID-s from bindings (git-fixes).\n- cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (git-fixes).\n- cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (git-fixes).\n- cpufreq: s3c64xx: Fix compilation warning (stable-fixes).\n- crypto: hisilicon/sec2 - fix for aead icv error (git-fixes).\n- crypto: hisilicon/sec2 - fix for aead invalid authsize (git-fixes).\n- crypto: hisilicon/sec2 - optimize the error return process (stable-fixes).\n- cxgb4: Avoid removal of uninserted tid (git-fixes).\n- cxgb4: use port number to set mac addr (git-fixes).\n- devlink: avoid potential loop in devlink_rel_nested_in_notify_work() (bsc#1237234).\n- dlm: fix srcu_read_lock() return type to int (git-fixes).\n- doc: update managed_irq documentation (bsc#1236897).\n- driver core: bus: add irq_get_affinity callback to bus_type (bsc#1236896).\n- drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor (stable-fixes).\n- drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (git-fixes).\n- drm/amd/pm: Mark MM activity as unsupported (stable-fixes).\n- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (stable-fixes).\n- drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode() (git-fixes).\n- drm/amdgpu: disable BAR resize on Dell G5 SE (git-fixes).\n- drm/amdgpu: fix UVD contiguous CS mapping problem (bsc#1236759).\n- drm/amdkfd: only flush the validate MES contex (stable-fixes).\n- drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT (stable-fixes).\n- drm/bridge: it6505: fix HDCP Bstatus check (stable-fixes).\n- drm/bridge: it6505: fix HDCP CTS compare V matching (stable-fixes).\n- drm/bridge: it6505: fix HDCP CTS KSV list wait timer (stable-fixes).\n- drm/bridge: it6505: fix HDCP encryption when R0 ready (stable-fixes).\n- drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes (stable-fixes).\n- drm/i915: Fix page cleanup on DMA remap failure (git-fixes).\n- drm/i915: Make sure all planes in use by the joiner have their crtc included (stable-fixes).\n- drm/i915/dp: Fix error handling during 128b/132b link training (stable-fixes).\n- drm/i915/dp: Iterate DSC BPP from high to low on all platforms (git-fixes).\n- drm/i915/guc: Debug print LRC state entries only if the context is pinned (git-fixes).\n- drm/i915/pmu: Fix zero delta busyness issue (git-fixes).\n- drm/i915/selftests: avoid using uninitialized context (git-fixes).\n- drm/komeda: Add check for komeda_get_layer_fourcc_list() (git-fixes).\n- drm/mgag200: Added support for the new device G200eH5 (jsc#PED-12094)\n- drm/modeset: Handle tiled displays in pan_display_atomic (stable-fixes).\n- drm/msm: Avoid rounding up to one jiffy (git-fixes).\n- drm/msm/dpu: Disable dither in phys encoder cleanup (git-fixes).\n- drm/msm/dpu: Do not leak bits_per_component into random DSC_ENC fields (git-fixes).\n- drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER (stable-fixes).\n- drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() (git-fixes).\n- drm/nouveau/pmu: Fix gp10b firmware guard (git-fixes).\n- drm/rockchip: move output interface related definition to rockchip_drm_drv.h (stable-fixes).\n- drm/rockchip: vop2: Fix the windows switch between different layers (git-fixes).\n- drm/rockchip: vop2: include rockchip_drm_drv.h (git-fixes).\n- drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config (stable-fixes).\n- drm/rockchip: vop2: Set YUV/RGB overlay mode (stable-fixes).\n- drm/sched: Fix preprocessor guard (git-fixes).\n- drm/virtio: New fence for every plane update (stable-fixes).\n- efi: Avoid cold plugged memory for placing the kernel (stable-fixes).\n- efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (stable-fixes).\n- eth: gve: use appropriate helper to set xdp_features (git-fixes).\n- exfat: convert to ctime accessor functions (git-fixes).\n- exfat: do not zero the extended part (bsc#1237356).\n- exfat: fix appending discontinuous clusters to empty file (bsc#1237356).\n- exfat: fix file being changed by unaligned direct write (git-fixes).\n- exfat: fix timing of synchronizing bitmap and inode (bsc#1237356).\n- exfat: fix zero the unwritten part for dio read (git-fixes).\n- fbdev: omap: use threaded IRQ for LCD DMA (stable-fixes).\n- firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (git-fixes).\n- Fix conditional for selecting gcc-13 \n- Fix conditional for selecting gcc-13.\n- Fix memory-hotplug regression (bsc#1237504) \n- futex: Do not include process MM in futex key on no-MMU (git-fixes).\n- gpio: bcm-kona: Add missing newline to dev_err format string (git-fixes).\n- gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (git-fixes).\n- gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (git-fixes).\n- gpio: pca953x: Improve interrupt support (git-fixes).\n- gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (git-fixes).\n- gpiolib: acpi: Add a quirk for Acer Nitro ANV14 (stable-fixes).\n- gpu: drm_dp_cec: fix broken CEC adapter properties check (git-fixes).\n- Grab mm lock before grabbing pt lock (git-fixes).\n- gup: make the stack expansion warning a bit more targeted (bsc#1238214).\n- hfs: Sanity check the root record (git-fixes).\n- hid: hid-steam: Add Deck IMU support (stable-fixes).\n- hid: hid-steam: Add gamepad-only mode switched to by holding options (stable-fixes).\n- hid: hid-steam: Avoid overwriting smoothing parameter (stable-fixes).\n- hid: hid-steam: Clean up locking (stable-fixes).\n- hid: hid-steam: Disable watchdog instead of using a heartbeat (stable-fixes).\n- hid: hid-steam: Do not use cancel_delayed_work_sync in IRQ context (git-fixes).\n- hid: hid-steam: Fix cleanup in probe() (git-fixes).\n- hid: hid-steam: Make sure rumble work is canceled on removal (stable-fixes).\n- hid: hid-steam: Move hidraw input (un)registering to work (git-fixes).\n- hid: hid-steam: remove pointless error message (stable-fixes).\n- hid: hid-steam: Update list of identifiers from SDL (stable-fixes).\n- hid: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() (git-fixes).\n- hid: multitouch: Add NULL check in mt_input_configured (git-fixes).\n- hid: Wacom: Add PCI Wacom device support (stable-fixes).\n- i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz (stable-fixes).\n- i2c: ls2x: Fix frequency division register access (git-fixes).\n- i2c: npcm: disable interrupt enable bit before devm_request_irq (git-fixes).\n- iavf: allow changing VLAN state without calling PF (git-fixes).\n- IB/mlx5: Set and get correct qp_num for a DCT QP (git-fixes)\n- ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1237415).\n- ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1237415).\n- ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (git-fixes).\n- ice: fix incorrect PHY settings for 100 GB/s (git-fixes).\n- ice: fix max values for dpll pin phase adjust (git-fixes).\n- ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1237415).\n- ice: gather page_count()'s of each frag right before XDP prog call (git-fixes).\n- ice: pass VSI pointer into ice_vc_isvalid_q_id (bsc#1237848 bsc#1230497).\n- ice: put Rx buffers after being done with current frame (git-fixes).\n- ice: Skip PTP HW writes during PTP reset procedure (git-fixes).\n- ice: stop storing XDP verdict within ice_rx_buf (git-fixes).\n- ice: use internal pf id instead of function number (git-fixes).\n- idpf: add read memory barrier when checking descriptor done bit (git-fixes).\n- idpf: call set_real_num_queues in idpf_open (bsc#1236661).\n- idpf: convert workqueues to unbound (git-fixes).\n- idpf: fix handling rsc packet with a single segment (git-fixes).\n- idpf: fix VF dynamic interrupt ctl register initialization (git-fixes).\n- igc: Fix HW RX timestamp when passed by ZC XDP (git-fixes).\n- igc: return early when failing to read EECD register (git-fixes).\n- igc: Set buffer type for empty frames in igc_init_empty_frame (git-fixes).\n- initcall_blacklist: Does not allow kernel_lockdown be blacklisted (bsc#1237521).\n- Input: allocate keycode for phone linking (stable-fixes).\n- iommu/arm-smmu-v3: Clean up more on probe failure (stable-fixes).\n- kabi: fix bus type (bsc#1236896).\n- kabi: fix group_cpus_evenly (bsc#1236897).\n- kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).\n- kasan: do not call find_vm_area() in a PREEMPT_RT kernel (git-fixes).\n- kbuild: userprogs: fix bitsize and target detection on clang (git-fixes).\n- kernel-source: Also replace bin/env\n- kvm: arm64: Do not eagerly teardown the vgic on init error (git-fixes).\n- kvm: arm64: Ensure vgic_ready() is ordered against MMIO registration (git-fixes).\n- kvm: arm64: Fix alignment of kvm_hyp_memcache allocations (git-fixes).\n- kvm: arm64: Flush hyp bss section after initialization of variables in bss (git-fixes).\n- kvm: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (git-fixes)\n- kvm: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (git-fixes).\n- kvm: nSVM: Enter guest mode before initializing nested NPT MMU (git-fixes).\n- kvm: nVMX: Treat vpid01 as current if L2 is active, but with  VPID disabled (jsc#PED-348 git-fixes).\n- kvm: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (jsc#PED-348 git-fixes).\n- kvm: s390: vsie: fix some corner-cases when grabbing vsie pages (git-fixes bsc#1237155).\n- kvm: VMX: Allow toggling bits in MSR_IA32_RTIT_CTL when enable bit is cleared (git-fixes).\n- kvm: VMX: Fix comment of handle_vmx_instruction() (git-fixes).\n- kvm: VMX: reset the segment cache after segment init in  vmx_vcpu_reset() (jsc#PED-348 git-fixes).\n- kvm: VMX: reset the segment cache after segment init in vmx_vcpu_reset() (jsc#PED-348 git-fixes).\n- kvm: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX (git-fixes).\n- kvm: x86: Advertise SRSO_USER_KERNEL_NO to userspace (git-fixes).\n- kvm: x86: AMD's IBPB is not equivalent to Intel's IBPB (git-fixes).\n- kvm: x86: Avoid double RDPKRU when loading host/guest PKRU (git-fixes).\n- kvm: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init (git-fixes).\n- kvm: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit() (git-fixes).\n- kvm: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (git-fixes).\n- kvm: x86: Unconditionally set irr_pending when updating APICv  state (jsc#PED-348).\n- kvm: x86: Unconditionally set irr_pending when updating APICv state (jsc#PED-348).\n- kvm: x86: Zero out PV features cache when the CPUID leaf is not present (git-fixes).\n- kvm: x86/mmu: Skip the 'try unsync' path iff the old SPTE was a leaf SPTE (git-fixes).\n- lib: stackinit: hide never-taken branch from compiler (stable-fixes).\n- lib/group_cpus: honor housekeeping config when grouping CPUs (bsc#1236897).\n- lib/group_cpus: let group_cpu_evenly return number initialized masks (bsc#1236897).\n- lib/iov_iter: fix import_iovec_ubuf iovec management (git-fixes).\n- lockdep: fix deadlock issue between lockdep and rcu (git-fixes).\n- lockdep: Fix upper limit for LOCKDEP_*_BITS configs (stable-fixes).\n- locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (git-fixes).\n- locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (git-fixes).\n- loop: do not set QUEUE_FLAG_NOMERGES (git-fixes).\n- md: convert comma to semicolon (git-fixes).\n- md: Do not flush sync_work in md_write_start() (git-fixes).\n- md/md-bitmap: add 'sync_size' into struct md_bitmap_stats (git-fixes).\n- md/md-bitmap: Add missing destroy_work_on_stack() (git-fixes).\n- md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats() (git-fixes).\n- md/md-cluster: fix spares warnings for __le64 (git-fixes).\n- md/raid0: do not free conf on raid0_run failure (git-fixes).\n- md/raid1: do not free conf on raid0_run failure (git-fixes).\n- md/raid5: Wait sync io to finish before changing group cnt (git-fixes).\n- media: cxd2841er: fix 64-bit division on gcc-9 (stable-fixes).\n- media: uvcvideo: Add Kurokesu C1 PRO camera (stable-fixes).\n- media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera (stable-fixes).\n- media: uvcvideo: Implement dual stream quirk to fix loss of usb packets (stable-fixes).\n- media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread (stable-fixes).\n- mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (stable-fixes).\n- mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear() (git-fixes)\n- mmc: core: Respect quirk_max_rate for non-UHS SDIO card (stable-fixes).\n- mmc: mtk-sd: Fix register settings for hs400(es) mode (git-fixes).\n- mmc: sdhci-msm: Correctly set the load for the regulator (stable-fixes).\n- Move upstreamed ACPI patch into sorted section\n- mptcp: export local_address (git-fixes)\n- mptcp: fix data races on local_id (git-fixes)\n- mptcp: fix inconsistent state on fastopen race (bsc#1222672).\n- mptcp: fix NL PM announced address accounting (git-fixes)\n- mptcp: fix recvbuffer adjust on sleeping rcvmsg (git-fixes)\n- mptcp: fully established after ADD_ADDR echo on MPJ (git-fixes)\n- mptcp: pass addr to mptcp_pm_alloc_anno_list (git-fixes)\n- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (git-fixes)\n- mptcp: pm: deny endp with signal + subflow + port (git-fixes)\n- mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set (git-fixes)\n- mptcp: pm: do not try to create sf if alloc failed (git-fixes)\n- mptcp: pm: fullmesh: select the right ID later (git-fixes)\n- mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID (git-fixes)\n- mptcp: pm: only in-kernel cannot have entries with ID 0 (git-fixes)\n- mptcp: pm: re-using ID of unused flushed subflows (git-fixes)\n- mptcp: pm: re-using ID of unused removed ADD_ADDR (git-fixes)\n- mptcp: pm: re-using ID of unused removed subflows (git-fixes)\n- mptcp: pm: reduce indentation blocks (git-fixes)\n- mptcp: pm: remove mptcp_pm_remove_subflow (git-fixes)\n- mptcp: unify pm get_flags_and_ifindex_by_id (git-fixes)\n- mptcp: unify pm get_local_id interfaces (git-fixes)\n- mptcp: unify pm set_flags interfaces (git-fixes)\n- mtd: rawnand: cadence: fix error code in cadence_nand_init() (git-fixes).\n- mtd: rawnand: cadence: fix incorrect device in dma_unmap_single (git-fixes).\n- mtd: rawnand: cadence: fix unchecked dereference (git-fixes).\n- mtd: rawnand: cadence: use dma_map_resource for sdma address (git-fixes).\n- nbd: do not allow reconnect after disconnect (git-fixes).\n- nbd: Fix signal handling (git-fixes).\n- nbd: Improve the documentation of the locking assumptions (git-fixes).\n- net: avoid UAF on deleted altname (bsc#1233749).\n- net: check for altname conflicts when changing netdev's netns (bsc#1233749).\n- net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).\n- net: do not send a MOVE event when netdev changes netns (bsc#1233749).\n- net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).\n- net: fix ifname in netlink ntf during netns move (bsc#1233749).\n- net: fix removing a namespace with conflicting altnames (bsc#1233749).\n- net: Fix undefined behavior in netdev name allocation (bsc#1233749).\n- net: free altname using an RCU callback (bsc#1233749).\n- net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).\n- net: move altnames together with the netdevice (bsc#1233749).\n- net: reduce indentation of __dev_alloc_name() (bsc#1233749).\n- net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).\n- net: remove else after return in dev_prep_valid_name() (bsc#1233749).\n- net: rose: lock the socket in rose_bind() (git-fixes).\n- net: sfc: Correct key_len for efx_tc_ct_zone_ht_params (git-fixes).\n- net: smc: fix spurious error message from __sock_release() (bsc#1237126).\n- net: trust the bitmap in __dev_alloc_name() (bsc#1233749).\n- net: wwan: iosm: Fix hibernation by re-binding the driver around it (stable-fixes).\n- net/mlx5: Correct TASR typo into TSAR (git-fixes).\n- net/mlx5: Fix msix vectors to respect platform limit (bsc#1225981).\n- net/mlx5: Fix RDMA TX steering prio (git-fixes).\n- net/mlx5: SF, Fix add port error handling (git-fixes).\n- net/mlx5: Verify support for scheduling element and TSAR type (git-fixes).\n- net/mlx5e: Always start IPsec sequence number from 1 (git-fixes).\n- net/mlx5e: macsec: Maintain TX SA from encoding_sa (git-fixes).\n- net/mlx5e: Rely on reqid in IPsec tunnel mode (git-fixes).\n- net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (bsc#1236994).\n- nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range() (git-fixes).\n- null_blk: Do not allow runt zone with zone capacity smaller then zone size (git-fixes).\n- null_blk: do not cap max_hw_sectors to BLK_DEF_MAX_SECTORS (git-fixes).\n- null_blk: Fix missing mutex_destroy() at module removal (git-fixes).\n- null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (git-fixes).\n- null_blk: fix validation of block size (git-fixes).\n- null_blk: Print correct max open zones limit in null_init_zoned_dev() (git-fixes).\n- null_blk: Remove usage of the deprecated ida_simple_xx() API (git-fixes).\n- nvme-fc: use ctrl state getter (git-fixes).\n- nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk (git-fixes).\n- nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk (git-fixes).\n- nvme-pci: use block layer helpers to calculate num of queues (bsc#1236897).\n- nvme-tcp: fix connect failure on receiving partial ICResp PDU (git-fixes).\n- nvme: handle connectivity loss in nvme_set_queue_count (git-fixes).\n- nvme: make nvme_tls_attrs_group static (git-fixes).\n- nvme: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (bsc#1236896).\n- nvme: tcp: Fix compilation warning with W=1 (git-fixes).\n- nvme/ioctl: add missing space in err message (git-fixes).\n- nvmet: Fix crash when a namespace is disabled (git-fixes).\n- ocfs2: fix incorrect CPU endianness conversion causing mount failure (bsc#1236138).\n- packaging: Turn gcc version into config.sh variable. \n- padata: Clean up in padata_do_multithreaded() (bsc#1237563).\n- padata: Honor the caller's alignment in case of chunk_size 0 (bsc#1237563).\n- partitions: ldm: remove the initial kernel-doc notation (git-fixes).\n- PCI: hookup irq_get_affinity callback (bsc#1236896).\n- PCI: imx6: Simplify clock handling by using clk_bulk*() function (git-fixes).\n- PCI: switchtec: Add Microchip PCI100X device IDs (stable-fixes).\n- PCI: Use downstream bridges for distributing resources (bsc#1237325).\n- PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P (stable-fixes).\n- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (git-fixes).\n- phy: rockchip: naneng-combphy: compatible reset with old DT (git-fixes).\n- phy: tegra: xusb: reset VBUS & ID OVERRIDE (git-fixes).\n- Pickup RXE code change introduced by upstream merge\n- pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware (git-fixes).\n- platform/x86: acer-wmi: Ignore AC events (stable-fixes).\n- platform/x86: int3472: Check for adev == NULL (stable-fixes).\n- platform/x86: ISST: Ignore minor version change (bsc#1237452).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1237452).\n- platform/x86/intel-uncore-freq: Increase minor number support (bsc#1237452).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1237452).\n- power: supply: da9150-fg: fix potential overflow (git-fixes).\n- powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (bsc#1215199).\n- powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (bsc#1215199).\n- powerpc/code-patching: Disable KASAN report during patching via temporary mm (bsc#1215199).\n- powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (bsc#1215199).\n- powerpc/pseries/iommu: Split Dynamic DMA Window to be used in Hybrid mode (ltc#210895 bsc#1235933 ltc#210896 bsc#1235932).\n- powerpc/trace: Add support for HAVE_FUNCTION_ARG_ACCESS_API (bsc#1236967 ltc#210988).\n- printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (bsc#1237950).\n- rbd: do not assume rbd_is_lock_owner() for exclusive mappings (git-fixes).\n- rbd: do not assume RBD_LOCK_STATE_LOCKED for exclusive mappings (git-fixes).\n- rbd: do not move requests to the running list on errors (git-fixes).\n- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (git-fixes).\n- RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (git-fixes)\n- RDMA/bnxt_re: Fix the statistics for Gen P7 VF (git-fixes)\n- RDMA/efa: Reset device on probe failure (git-fixes)\n- RDMA/hns: Fix mbox timing out by adding retry mechanism (git-fixes)\n- RDMA/mana_ib: Allocate PAGE aligned doorbell index (git-fixes).\n- RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (git-fixes)\n- RDMA/mlx5: Fix a WARN during dereg_mr for DM type (git-fixes)\n- RDMA/mlx5: Fix AH static rate parsing (git-fixes)\n- RDMA/mlx5: Fix bind QP error cleanup flow (git-fixes)\n- RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes)\n- RDMA/mlx5: Fix the recovery flow of the UMR QP (git-fixes)\n- RDMA/rxe: Improve newline in printing messages (git-fixes)\n- regmap-irq: Add missing kfree() (git-fixes).\n- Revert 'blk-throttle: Fix IO hang for a corner case' (git-fixes).\n- Revert 'drm/amd/display: Use HW lock mgr for PSR1' (stable-fixes).\n- rpm/kernel-docs.spec.in: Workaround for reproducible builds (bsc#1238303)\n- rpm/split-modules: Fix optional splitting with usrmerge (bsc#1238570)\n- s390/cio: rename bitmap_size() -> idset_bitmap_size() (git-fixes bsc#1236205).\n- s390/futex: Fix FUTEX_OP_ANDN implementation (git-fixes bsc#1237158).\n- s390/iucv: fix receive buffer virtual vs physical address confusion (git-fixes bsc#1236200).\n- s390/pci: Fix handling of isolated VFs (git-fixes bsc#1238368).\n- s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (bsc#1236752).\n- s390/pci: Fix SR-IOV for PFs initially in standby (git-fixes bsc#1236752).\n- s390/pci: Ignore RID for isolated VFs (bsc#1236752).\n- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (git-fixes bsc#1238368).\n- s390/pci: Sort PCI functions prior to creating virtual busses (bsc#1236752).\n- s390/pci: Use topology ID for multi-function devices (bsc#1236752).\n- s390/smp,mcck: fix early IPI handling (git-fixes bsc#1236199).\n- s390/topology: Improve topology detection (bsc#1236591).\n- s390/vfio-ap: Remove gmap_convert_to_secure() from vfio_ap_ops (git-fixes bsc#1236203).\n- scripts/gdb: fix aarch64 userspace detection in get_current_task (stable-fixes).\n- scsi: core: Clear driver private data when retrying request (git-fixes).\n- scsi: core: Do not retry I/Os during depopulation (git-fixes).\n- scsi: core: Handle depopulation and restoration in progress (git-fixes).\n- scsi: hisi_sas: Allocate DFX memory during dump trigger (git-fixes).\n- scsi: hisi_sas: Directly call register snapshot instead of using workqueue (git-fixes).\n- scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset (git-fixes).\n- scsi: hisi_sas: Fix a deadlock issue related to automatic dump (git-fixes).\n- scsi: hisi_sas: Remove redundant checks for automatic debugfs dump (git-fixes).\n- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (git-fixes).\n- scsi: lpfc: Copyright updates for 14.4.0.8 patches (bsc#1238347).\n- scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (bsc#1238347).\n- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (bsc#1238347).\n- scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (bsc#1238347).\n- scsi: lpfc: Reduce log message generation during ELS ring clean up (bsc#1238347).\n- scsi: lpfc: Update lpfc version to 14.4.0.8 (bsc#1238347).\n- scsi: megaraid_sas: Fix for a potential deadlock (git-fixes).\n- scsi: mpi3mr: Fix possible crash when setting up bsg fails (git-fixes).\n- scsi: mpi3mr: Start controller indexing from 0 (git-fixes).\n- scsi: mpi3mr: Use ida to manage mrioc ID (git-fixes).\n- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set  during driver load time (jsc#PED-11253).\n- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (jsc#PED-11253).\n- scsi: myrb: Remove dead code (git-fixes).\n- scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (git-fixes).\n- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (git-fixes).\n- scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (bsc#1236896).\n- scsi: scsi_debug: Fix hrtimer support for ndelay (git-fixes).\n- scsi: sg: Enable runtime power management (git-fixes).\n- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (git-fixes).\n- scsi: st: Do not modify unknown block number in MTIOCGET (git-fixes).\n- scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).\n- scsi: use block layer helpers to calculate num of queues (bsc#1236897).\n- selftest: hugetlb_dio: fix test naming (git-fixes).\n- selftest: mm: Test if hugepage does not get leaked during __bio_release_pages() (git-fixes).\n- selftests: gpio: gpio-sim: Fix missing chip disablements (stable-fixes).\n- selftests: hugetlb_dio: check for initial conditions to skip in the start (git-fixes).\n- selftests: hugetlb_dio: fixup check for initial conditions to skip in the start (git-fixes).\n- selftests: mptcp: connect: -f: no reconnect (git-fixes).\n- selftests: rtnetlink: update netdevsim ipsec output format (stable-fixes).\n- selftests/futex: pass _GNU_SOURCE without a value to the compiler (git-fixes).\n- selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() (stable-fixes).\n- serial: 8250: Fix fifo underflow on flush (git-fixes).\n- serial: sc16is7xx: use device_property APIs when configuring irda mode (stable-fixes).\n- smb: cached directories can be more than root file handle (bsc#1231432).\n- smb: cilent: set reparse mount points as automounts (git-fixes).\n- smb: client: add support for WSL reparse points (git-fixes).\n- smb: client: allow creating special files via reparse points (git-fixes).\n- smb: client: allow creating symlinks via reparse points (git-fixes).\n- smb: client: cleanup smb2_query_reparse_point() (git-fixes).\n- smb: client: do not query reparse points twice on symlinks (git-fixes).\n- smb: client: extend smb2_compound_op() to accept more commands (bsc#1231432).\n- smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs() (git-fixes).\n- smb: client: fix corruption in cifs_extend_writeback (bsc#1235609).\n- smb: client: fix double put of @cfile in smb2_rename_path() (git-fixes).\n- smb: client: fix double put of @cfile in smb2_set_path_size() (git-fixes).\n- smb: client: fix hardlinking of reparse points (git-fixes).\n- smb: client: Fix minor whitespace errors and warnings (git-fixes).\n- smb: client: fix missing mode bits for SMB symlinks (git-fixes).\n- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (git-fixes).\n- smb: client: fix OOB in SMB2_query_info_init() (bsc#1231432).\n- smb: client: fix OOB in smb2_query_reparse_point() (git-fixes).\n- smb: client: fix possible double free in smb2_set_ea() (git-fixes).\n- smb: client: fix potential broken compound request (git-fixes).\n- smb: client: fix renaming of reparse points (git-fixes).\n- smb: client: get rid of smb311_posix_query_path_info() (git-fixes).\n- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (git-fixes).\n- smb: client: handle path separator of created SMB symlinks (git-fixes).\n- smb: client: handle special files and symlinks in SMB3 POSIX (git-fixes).\n- smb: client: handle STATUS_IO_REPARSE_TAG_NOT_HANDLED (git-fixes).\n- smb: client: ignore unhandled reparse tags (git-fixes).\n- smb: client: implement ->query_reparse_point() for SMB1 (git-fixes).\n- smb: client: instantiate when creating SFU files (git-fixes).\n- smb: client: introduce ->parse_reparse_point() (git-fixes).\n- smb: client: introduce cifs_sfu_make_node() (git-fixes).\n- smb: client: introduce reparse mount option (git-fixes).\n- smb: client: introduce SMB2_OP_QUERY_WSL_EA (git-fixes).\n- smb: client: make smb2_compound_op() return resp buffer on success (bsc#1231432).\n- smb: client: move most of reparse point handling code to common file (git-fixes).\n- smb: client: move some params to cifs_open_info_data (bsc#1231432).\n- smb: client: optimise reparse point querying (git-fixes).\n- smb: client: parse owner/group when creating reparse points (git-fixes).\n- smb: client: parse reparse point flag in create response (bsc#1231432).\n- smb: client: parse uid, gid, mode and dev from WSL reparse points (git-fixes).\n- smb: client: properly close cfids on umount (bsc#1231432, bsc#1232299, bsc#1235599, bsc#1234896).\n- smb: client: reduce number of parameters in smb2_compound_op() (git-fixes).\n- smb: client: reduce stack usage in smb2_query_info_compound() (bsc#1231432).\n- smb: client: reduce stack usage in smb2_query_reparse_point() (git-fixes).\n- smb: client: reduce stack usage in smb2_set_ea() (bsc#1231432).\n- smb: client: retry compound request without reusing lease (git-fixes).\n- smb: client: return reparse type in /proc/mounts (git-fixes).\n- smb: client: reuse file lease key in compound operations (git-fixes).\n- smb: client: set correct d_type for reparse DFS/DFSR and mount point (git-fixes).\n- smb: client: set correct file type from NFS reparse points (git-fixes).\n- smb: client: stop revalidating reparse points unnecessarily (git-fixes).\n- smb: use kernel_connect() and kernel_bind() (git-fixes).\n- smb3: fix creating FIFOs when mounting with 'sfu' mount option (git-fixes).\n- smb3: request handle caching when caching directories (bsc#1231432).\n- smb3: retrying on failed server close (bsc#1231432).\n- soc: loongson: loongson2_guts: Add check for devm_kstrdup() (git-fixes).\n- soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove (git-fixes).\n- soc: qcom: smem: introduce qcom_smem_get_soc_id() (git-fixes).\n- soc: qcom: socinfo: move SMEM item struct and defines to a header (git-fixes).\n- soc/mediatek: mtk-devapc: Convert to platform remove callback returning void (stable-fixes).\n- soc/tegra: fuse: Update Tegra234 nvmem keepout list (stable-fixes).\n- spi: atmel-qspi: Memory barriers after memory-mapped I/O (git-fixes).\n- spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families (stable-fixes).\n- spi: sn-f-ospi: Fix division by zero (git-fixes).\n- tg3: Disable tg3 PCIe AER on system reboot (bsc#1219367).\n- tomoyo: do not emit warning in tomoyo_write_control() (stable-fixes).\n- tools: fix annoying 'mkdir -p ...' logs when building tools in parallel (git-fixes).\n- ublk: fix error code for unsupported command (git-fixes).\n- ublk: fix ublk_ch_mmap() for 64K page size (git-fixes).\n- ublk: move ublk_cancel_dev() out of ub->mutex (git-fixes).\n- ublk: move zone report data out of request pdu (git-fixes).\n- usb: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (stable-fixes).\n- usb: cdc-acm: Check control transfer buffer size before access (git-fixes).\n- usb: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (git-fixes).\n- usb: cdc-acm: Fix handling of oversized fragments (git-fixes).\n- usb: core: fix pipe creation for get_bMaxPacketSize0 (git-fixes).\n- usb: dwc2: gadget: remove of_node reference upon udc_stop (git-fixes).\n- usb: dwc3: core: Defer the probe until USB power supply ready (git-fixes).\n- usb: dwc3: Fix timeout issue during controller enter/exit from halt state (git-fixes).\n- usb: Fix the issue of task recovery failure caused by USB status when S4 wakes up (git-fixes).\n- usb: gadget: core: flush gadget workqueue after device removal (git-fixes).\n- usb: gadget: f_midi: f_midi_complete to call queue_work (git-fixes).\n- usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (git-fixes).\n- usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix compiler warning (git-fixes).\n- usb: hub: Ignore non-compliant devices with too many configs or interfaces (stable-fixes).\n- usb: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (stable-fixes).\n- usb: quirks: Add NO_LPM quirk for TOSHIBA TransMemory-Mx device (git-fixes).\n- usb: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (stable-fixes).\n- usb: roles: set switch registered flag early on (git-fixes).\n- usb: serial: option: add MeiG Smart SLM828 (stable-fixes).\n- usb: serial: option: add Telit Cinterion FN990B compositions (stable-fixes).\n- usb: serial: option: drop MeiG Smart defines (stable-fixes).\n- usb: serial: option: fix Telit Cinterion FN990A name (stable-fixes).\n- usb: xhci: Fix NULL pointer dereference on certain command aborts (git-fixes).\n- usbnet: gl620a: fix endpoint checking in genelink_bind() (git-fixes).\n- usbnet: ipheth: document scope of NCM implementation (stable-fixes).\n- Use gcc-13 for build on SLE16 (jsc#PED-10028).\n- util_macros.h: fix/rework find_closest() macros (git-fixes).\n- vhost/net: Set num_buffers for virtio 1.0 (git-fixes).\n- virtio_blk: reverse request order in virtio_queue_rqs (git-fixes).\n- virtio: blk/scsi: replace blk_mq_virtio_map_queues with blk_mq_map_hw_queues (bsc#1236896).\n- virtio: blk/scsi: use block layer helpers to calculate num of queues (bsc#1236897).\n- virtio: hookup irq_get_affinity callback (bsc#1236896).\n- wifi: ath12k: fix handling of 6 GHz rules (git-fixes).\n- wifi: brcmfmac: Check the return value of of_property_read_string_index() (stable-fixes).\n- wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (stable-fixes).\n- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (stable-fixes).\n- wifi: cfg80211: regulatory: improve invalid hints checking (git-fixes).\n- wifi: iwlwifi: avoid memory leak (stable-fixes).\n- wifi: iwlwifi: limit printed string from FW file (git-fixes).\n- wifi: iwlwifi: mvm: do not try to talk to a dead firmware (git-fixes).\n- wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac (stable-fixes).\n- wifi: mt76: mt7915: fix omac index assignment after hardware reset (git-fixes).\n- wifi: mt76: mt7915: improve hardware restart reliability (stable-fixes).\n- wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH (stable-fixes).\n- wifi: nl80211: reject cooked mode if it is set along with other flags (git-fixes).\n- wifi: rtw88: sdio: Fix disconnection after beacon loss (stable-fixes).\n- wifi: rtw89: add crystal_cap check to avoid setting as overflow value (stable-fixes).\n- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (git-fixes).\n- x86/asm: Make serialize() always_inline (git-fixes).\n- x86/bugs: Add SRSO_USER_KERNEL_NO support (git-fixes).\n- x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation (git-fixes).\n- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (git-fixes).\n- x86/mm: Carve out INVLPG inline asm for use by others (git-fixes).\n- x86/xen: add FRAME_END to xen_hypercall_hvm() (git-fixes).\n- x86/xen: allow larger contiguous memory regions in PV guests (git-fixes).\n- x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (git-fixes).\n- xen/swiotlb: relax alignment requirements (git-fixes).\n- xhci: dbgtty: remove kfifo_out() wrapper (git-fixes).\n- zram: clear IDLE flag after recompression (git-fixes).\n- zram: clear IDLE flag in mark_idle() (git-fixes).\n- zram: do not mark idle slots that cannot be idle (git-fixes).\n- zram: fix potential UAF of zram table (git-fixes).\n- zram: fix uninitialized ZRAM not releasing backing device (git-fixes).\n- zram: refuse to use zero sized block device as backing device (git-fixes).\n- zram: split memory-tracking and ac-time tracking (git-fixes).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2025-955,SUSE-SLE-Module-Live-Patching-15-SP6-2025-955,SUSE-SLE-Module-RT-15-SP6-2025-955,openSUSE-SLE-15.6-2025-955",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0955-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2025:0955-1",
            url: "https://www.suse.com/support/update/announcement/2025/suse-su-20250955-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2025:0955-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020563.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1012628",
            url: "https://bugzilla.suse.com/1012628",
         },
         {
            category: "self",
            summary: "SUSE Bug 1215199",
            url: "https://bugzilla.suse.com/1215199",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219367",
            url: "https://bugzilla.suse.com/1219367",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222672",
            url: "https://bugzilla.suse.com/1222672",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222803",
            url: "https://bugzilla.suse.com/1222803",
         },
         {
            category: "self",
            summary: "SUSE Bug 1225606",
            url: "https://bugzilla.suse.com/1225606",
         },
         {
            category: "self",
            summary: "SUSE Bug 1225742",
            url: "https://bugzilla.suse.com/1225742",
         },
         {
            category: "self",
            summary: "SUSE Bug 1225981",
            url: "https://bugzilla.suse.com/1225981",
         },
         {
            category: "self",
            summary: "SUSE Bug 1227937",
            url: "https://bugzilla.suse.com/1227937",
         },
         {
            category: "self",
            summary: "SUSE Bug 1228521",
            url: "https://bugzilla.suse.com/1228521",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230235",
            url: "https://bugzilla.suse.com/1230235",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230438",
            url: "https://bugzilla.suse.com/1230438",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230439",
            url: "https://bugzilla.suse.com/1230439",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230497",
            url: "https://bugzilla.suse.com/1230497",
         },
         {
            category: "self",
            summary: "SUSE Bug 1231432",
            url: "https://bugzilla.suse.com/1231432",
         },
         {
            category: "self",
            summary: "SUSE Bug 1231912",
            url: "https://bugzilla.suse.com/1231912",
         },
         {
            category: "self",
            summary: "SUSE Bug 1231920",
            url: "https://bugzilla.suse.com/1231920",
         },
         {
            category: "self",
            summary: "SUSE Bug 1231949",
            url: "https://bugzilla.suse.com/1231949",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232159",
            url: "https://bugzilla.suse.com/1232159",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232198",
            url: "https://bugzilla.suse.com/1232198",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232201",
            url: "https://bugzilla.suse.com/1232201",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232299",
            url: "https://bugzilla.suse.com/1232299",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232508",
            url: "https://bugzilla.suse.com/1232508",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232520",
            url: "https://bugzilla.suse.com/1232520",
         },
         {
            category: "self",
            summary: "SUSE Bug 1232919",
            url: "https://bugzilla.suse.com/1232919",
         },
         {
            category: "self",
            summary: "SUSE Bug 1233028",
            url: "https://bugzilla.suse.com/1233028",
         },
         {
            category: "self",
            summary: "SUSE Bug 1233109",
            url: "https://bugzilla.suse.com/1233109",
         },
         {
            category: "self",
            summary: "SUSE Bug 1233483",
            url: "https://bugzilla.suse.com/1233483",
         },
         {
            category: "self",
            summary: "SUSE Bug 1233749",
            url: "https://bugzilla.suse.com/1233749",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234070",
            url: "https://bugzilla.suse.com/1234070",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234853",
            url: "https://bugzilla.suse.com/1234853",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234857",
            url: "https://bugzilla.suse.com/1234857",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234891",
            url: "https://bugzilla.suse.com/1234891",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234894",
            url: "https://bugzilla.suse.com/1234894",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234895",
            url: "https://bugzilla.suse.com/1234895",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234896",
            url: "https://bugzilla.suse.com/1234896",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234963",
            url: "https://bugzilla.suse.com/1234963",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235054",
            url: "https://bugzilla.suse.com/1235054",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235061",
            url: "https://bugzilla.suse.com/1235061",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235073",
            url: "https://bugzilla.suse.com/1235073",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235435",
            url: "https://bugzilla.suse.com/1235435",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235485",
            url: "https://bugzilla.suse.com/1235485",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235592",
            url: "https://bugzilla.suse.com/1235592",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235599",
            url: "https://bugzilla.suse.com/1235599",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235609",
            url: "https://bugzilla.suse.com/1235609",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235932",
            url: "https://bugzilla.suse.com/1235932",
         },
         {
            category: "self",
            summary: "SUSE Bug 1235933",
            url: "https://bugzilla.suse.com/1235933",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236113",
            url: "https://bugzilla.suse.com/1236113",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236114",
            url: "https://bugzilla.suse.com/1236114",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236115",
            url: "https://bugzilla.suse.com/1236115",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236122",
            url: "https://bugzilla.suse.com/1236122",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236123",
            url: "https://bugzilla.suse.com/1236123",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236133",
            url: "https://bugzilla.suse.com/1236133",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236138",
            url: "https://bugzilla.suse.com/1236138",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236199",
            url: "https://bugzilla.suse.com/1236199",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236200",
            url: "https://bugzilla.suse.com/1236200",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236203",
            url: "https://bugzilla.suse.com/1236203",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236205",
            url: "https://bugzilla.suse.com/1236205",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236573",
            url: "https://bugzilla.suse.com/1236573",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236575",
            url: "https://bugzilla.suse.com/1236575",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236576",
            url: "https://bugzilla.suse.com/1236576",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236591",
            url: "https://bugzilla.suse.com/1236591",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236661",
            url: "https://bugzilla.suse.com/1236661",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236677",
            url: "https://bugzilla.suse.com/1236677",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236681",
            url: "https://bugzilla.suse.com/1236681",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236682",
            url: "https://bugzilla.suse.com/1236682",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236684",
            url: "https://bugzilla.suse.com/1236684",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236689",
            url: "https://bugzilla.suse.com/1236689",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236700",
            url: "https://bugzilla.suse.com/1236700",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236702",
            url: "https://bugzilla.suse.com/1236702",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236752",
            url: "https://bugzilla.suse.com/1236752",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236759",
            url: "https://bugzilla.suse.com/1236759",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236821",
            url: "https://bugzilla.suse.com/1236821",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236822",
            url: "https://bugzilla.suse.com/1236822",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236896",
            url: "https://bugzilla.suse.com/1236896",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236897",
            url: "https://bugzilla.suse.com/1236897",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236952",
            url: "https://bugzilla.suse.com/1236952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236967",
            url: "https://bugzilla.suse.com/1236967",
         },
         {
            category: "self",
            summary: "SUSE Bug 1236994",
            url: "https://bugzilla.suse.com/1236994",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237007",
            url: "https://bugzilla.suse.com/1237007",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237017",
            url: "https://bugzilla.suse.com/1237017",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237025",
            url: "https://bugzilla.suse.com/1237025",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237028",
            url: "https://bugzilla.suse.com/1237028",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237045",
            url: "https://bugzilla.suse.com/1237045",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237126",
            url: "https://bugzilla.suse.com/1237126",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237132",
            url: "https://bugzilla.suse.com/1237132",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237139",
            url: "https://bugzilla.suse.com/1237139",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237155",
            url: "https://bugzilla.suse.com/1237155",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237158",
            url: "https://bugzilla.suse.com/1237158",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237159",
            url: "https://bugzilla.suse.com/1237159",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237232",
            url: "https://bugzilla.suse.com/1237232",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237234",
            url: "https://bugzilla.suse.com/1237234",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237325",
            url: "https://bugzilla.suse.com/1237325",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237356",
            url: "https://bugzilla.suse.com/1237356",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237415",
            url: "https://bugzilla.suse.com/1237415",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237452",
            url: "https://bugzilla.suse.com/1237452",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237504",
            url: "https://bugzilla.suse.com/1237504",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237521",
            url: "https://bugzilla.suse.com/1237521",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237558",
            url: "https://bugzilla.suse.com/1237558",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237562",
            url: "https://bugzilla.suse.com/1237562",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237563",
            url: "https://bugzilla.suse.com/1237563",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237848",
            url: "https://bugzilla.suse.com/1237848",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237849",
            url: "https://bugzilla.suse.com/1237849",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237879",
            url: "https://bugzilla.suse.com/1237879",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237889",
            url: "https://bugzilla.suse.com/1237889",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237891",
            url: "https://bugzilla.suse.com/1237891",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237901",
            url: "https://bugzilla.suse.com/1237901",
         },
         {
            category: "self",
            summary: "SUSE Bug 1237950",
            url: "https://bugzilla.suse.com/1237950",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238214",
            url: "https://bugzilla.suse.com/1238214",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238303",
            url: "https://bugzilla.suse.com/1238303",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238347",
            url: "https://bugzilla.suse.com/1238347",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238368",
            url: "https://bugzilla.suse.com/1238368",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238509",
            url: "https://bugzilla.suse.com/1238509",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238525",
            url: "https://bugzilla.suse.com/1238525",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238570",
            url: "https://bugzilla.suse.com/1238570",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238739",
            url: "https://bugzilla.suse.com/1238739",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238751",
            url: "https://bugzilla.suse.com/1238751",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238753",
            url: "https://bugzilla.suse.com/1238753",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238759",
            url: "https://bugzilla.suse.com/1238759",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238860",
            url: "https://bugzilla.suse.com/1238860",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238863",
            url: "https://bugzilla.suse.com/1238863",
         },
         {
            category: "self",
            summary: "SUSE Bug 1238877",
            url: "https://bugzilla.suse.com/1238877",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52924 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52924/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-52925 page",
            url: "https://www.suse.com/security/cve/CVE-2023-52925/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26708 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26708/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-26810 page",
            url: "https://www.suse.com/security/cve/CVE-2024-26810/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-40980 page",
            url: "https://www.suse.com/security/cve/CVE-2024-40980/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-41055 page",
            url: "https://www.suse.com/security/cve/CVE-2024-41055/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-44974 page",
            url: "https://www.suse.com/security/cve/CVE-2024-44974/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-45009 page",
            url: "https://www.suse.com/security/cve/CVE-2024-45009/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-45010 page",
            url: "https://www.suse.com/security/cve/CVE-2024-45010/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47701 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47701/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-49884 page",
            url: "https://www.suse.com/security/cve/CVE-2024-49884/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-49950 page",
            url: "https://www.suse.com/security/cve/CVE-2024-49950/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50029 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50029/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50036 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50036/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50073 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50073/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50085 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50085/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50115 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50115/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50142 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50142/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50185 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50185/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50294 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50294/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53123 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53123/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53147 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53147/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53173 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53173/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53176 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53176/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53177 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53177/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53178 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53178/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53226 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53226/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-53239 page",
            url: "https://www.suse.com/security/cve/CVE-2024-53239/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56539 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56539/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56548 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56548/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56579 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56579/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56605 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56605/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56633 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56633/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56647 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56647/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-56720 page",
            url: "https://www.suse.com/security/cve/CVE-2024-56720/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-57889 page",
            url: "https://www.suse.com/security/cve/CVE-2024-57889/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-57948 page",
            url: "https://www.suse.com/security/cve/CVE-2024-57948/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-57994 page",
            url: "https://www.suse.com/security/cve/CVE-2024-57994/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21636 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21636/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21637 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21637/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21638 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21638/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21639 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21639/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21640 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21640/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21647 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21647/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21665 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21665/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21667 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21667/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21668 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21668/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21673 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21673/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21680 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21680/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21681 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21681/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21684 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21684/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21687 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21687/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21688 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21688/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21689 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21689/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21690 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21690/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21692 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21692/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21697 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21697/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21699 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21699/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21700 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21700/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21705 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21705/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21715 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21715/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21716 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21716/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21719 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21719/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21724 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21724/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21725 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21725/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21728 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21728/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21767 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21767/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21790 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21790/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21795 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21795/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21799 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21799/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-21802 page",
            url: "https://www.suse.com/security/cve/CVE-2025-21802/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2025-03-19T16:11:24Z",
         generator: {
            date: "2025-03-19T16:11:24Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2025:0955-1",
         initial_release_date: "2025-03-19T16:11:24Z",
         revision_history: [
            {
               date: "2025-03-19T16:11:24Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                        product: {
                           name: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                           product_id: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                        product: {
                           name: "kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                           product_id: "kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                        product: {
                           name: "kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                           product_id: "kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-livepatch-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-livepatch-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-livepatch-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        product: {
                           name: "reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                           product_id: "reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Live Patching 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Live Patching 15 SP6",
                           product_id: "SUSE Linux Enterprise Live Patching 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-live-patching:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Real Time Module 15 SP6",
                        product: {
                           name: "SUSE Real Time Module 15 SP6",
                           product_id: "SUSE Real Time Module 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-rt:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.6",
                        product: {
                           name: "openSUSE Leap 15.6",
                           product_id: "openSUSE Leap 15.6",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.6",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6",
               product_id: "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
            },
            product_reference: "kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
            },
            product_reference: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-rt-6.4.0-150600.10.29.1.noarch as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
            },
            product_reference: "kernel-source-rt-6.4.0-150600.10.29.1.noarch",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of SUSE Real Time Module 15 SP6",
               product_id: "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
            },
            product_reference: "kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-extra-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-optional-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-rt-6.4.0-150600.10.29.1.noarch as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
            },
            product_reference: "kernel-source-rt-6.4.0-150600.10.29.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            },
            product_reference: "reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-52924",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52924",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: don't skip expired elements during walk\n\nThere is an asymmetry between commit/abort and preparation phase if the\nfollowing conditions are met:\n\n1. set is a verdict map (\"1.2.3.4 : jump foo\")\n2. timeouts are enabled\n\nIn this case, following sequence is problematic:\n\n1. element E in set S refers to chain C\n2. userspace requests removal of set S\n3. kernel does a set walk to decrement chain->use count for all elements\n   from preparation phase\n4. kernel does another set walk to remove elements from the commit phase\n   (or another walk to do a chain->use increment for all elements from\n    abort phase)\n\nIf E has already expired in 1), it will be ignored during list walk, so its use count\nwon't have been changed.\n\nThen, when set is culled, ->destroy callback will zap the element via\nnf_tables_set_elem_destroy(), but this function is only safe for\nelements that have been deactivated earlier from the preparation phase:\nlack of earlier deactivate removes the element but leaks the chain use\ncount, which results in a WARN splat when the chain gets removed later,\nplus a leak of the nft_chain structure.\n\nUpdate pipapo_get() not to skip expired elements, otherwise flush\ncommand reports bogus ENOENT errors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52924",
               url: "https://www.suse.com/security/cve/CVE-2023-52924",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236821 for CVE-2023-52924",
               url: "https://bugzilla.suse.com/1236821",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 1.9,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "low",
            },
         ],
         title: "CVE-2023-52924",
      },
      {
         cve: "CVE-2023-52925",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-52925",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: don't fail inserts if duplicate has expired\n\nnftables selftests fail:\nrun-tests.sh testcases/sets/0044interval_overlap_0\nExpected: 0-2 . 0-3, got:\nW: [FAILED]     ./testcases/sets/0044interval_overlap_0: got 1\n\nInsertion must ignore duplicate but expired entries.\n\nMoreover, there is a strange asymmetry in nft_pipapo_activate:\n\nIt refetches the current element, whereas the other ->activate callbacks\n(bitmap, hash, rhash, rbtree) use elem->priv.\nSame for .remove: other set implementations take elem->priv,\nnft_pipapo_remove fetches elem->priv, then does a relookup,\nremove this.\n\nI suspect this was the reason for the change that prompted the\nremoval of the expired check in pipapo_get() in the first place,\nbut skipping exired elements there makes no sense to me, this helper\nis used for normal get requests, insertions (duplicate check)\nand deactivate callback.\n\nIn first two cases expired elements must be skipped.\n\nFor ->deactivate(), this gets called for DELSETELEM, so it\nseems to me that expired elements should be skipped as well, i.e.\ndelete request should fail with -ENOENT error.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-52925",
               url: "https://www.suse.com/security/cve/CVE-2023-52925",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236822 for CVE-2023-52925",
               url: "https://bugzilla.suse.com/1236822",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-52925",
      },
      {
         cve: "CVE-2024-26708",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26708",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: really cope with fastopen race\n\nFastopen and PM-trigger subflow shutdown can race, as reported by\nsyzkaller.\n\nIn my first attempt to close such race, I missed the fact that\nthe subflow status can change again before the subflow_state_change\ncallback is invoked.\n\nAddress the issue additionally copying with all the states directly\nreachable from TCP_FIN_WAIT1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26708",
               url: "https://www.suse.com/security/cve/CVE-2024-26708",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222672 for CVE-2024-26708",
               url: "https://bugzilla.suse.com/1222672",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26708",
      },
      {
         cve: "CVE-2024-26810",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-26810",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: Lock external INTx masking ops\n\nMask operations through config space changes to DisINTx may race INTx\nconfiguration changes via ioctl.  Create wrappers that add locking for\npaths outside of the core interrupt code.\n\nIn particular, irq_type is updated holding igate, therefore testing\nis_intx() requires holding igate.  For example clearing DisINTx from\nconfig space can otherwise race changes of the interrupt configuration.\n\nThis aligns interfaces which may trigger the INTx eventfd into two\ncamps, one side serialized by igate and the other only enabled while\nINTx is configured.  A subsequent patch introduces synchronization for\nthe latter flows.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-26810",
               url: "https://www.suse.com/security/cve/CVE-2024-26810",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222803 for CVE-2024-26810",
               url: "https://bugzilla.suse.com/1222803",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-26810",
      },
      {
         cve: "CVE-2024-40980",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-40980",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrop_monitor: replace spin_lock by raw_spin_lock\n\ntrace_drop_common() is called with preemption disabled, and it acquires\na spin_lock. This is problematic for RT kernels because spin_locks are\nsleeping locks in this configuration, which causes the following splat:\n\nBUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\nin_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 449, name: rcuc/47\npreempt_count: 1, expected: 0\nRCU nest depth: 2, expected: 2\n5 locks held by rcuc/47/449:\n #0: ff1100086ec30a60 ((softirq_ctrl.lock)){+.+.}-{2:2}, at: __local_bh_disable_ip+0x105/0x210\n #1: ffffffffb394a280 (rcu_read_lock){....}-{1:2}, at: rt_spin_lock+0xbf/0x130\n #2: ffffffffb394a280 (rcu_read_lock){....}-{1:2}, at: __local_bh_disable_ip+0x11c/0x210\n #3: ffffffffb394a160 (rcu_callback){....}-{0:0}, at: rcu_do_batch+0x360/0xc70\n #4: ff1100086ee07520 (&data->lock){+.+.}-{2:2}, at: trace_drop_common.constprop.0+0xb5/0x290\nirq event stamp: 139909\nhardirqs last  enabled at (139908): [<ffffffffb1df2b33>] _raw_spin_unlock_irqrestore+0x63/0x80\nhardirqs last disabled at (139909): [<ffffffffb19bd03d>] trace_drop_common.constprop.0+0x26d/0x290\nsoftirqs last  enabled at (139892): [<ffffffffb07a1083>] __local_bh_enable_ip+0x103/0x170\nsoftirqs last disabled at (139898): [<ffffffffb0909b33>] rcu_cpu_kthread+0x93/0x1f0\nPreemption disabled at:\n[<ffffffffb1de786b>] rt_mutex_slowunlock+0xab/0x2e0\nCPU: 47 PID: 449 Comm: rcuc/47 Not tainted 6.9.0-rc2-rt1+ #7\nHardware name: Dell Inc. PowerEdge R650/0Y2G81, BIOS 1.6.5 04/15/2022\nCall Trace:\n <TASK>\n dump_stack_lvl+0x8c/0xd0\n dump_stack+0x14/0x20\n __might_resched+0x21e/0x2f0\n rt_spin_lock+0x5e/0x130\n ? trace_drop_common.constprop.0+0xb5/0x290\n ? skb_queue_purge_reason.part.0+0x1bf/0x230\n trace_drop_common.constprop.0+0xb5/0x290\n ? preempt_count_sub+0x1c/0xd0\n ? _raw_spin_unlock_irqrestore+0x4a/0x80\n ? __pfx_trace_drop_common.constprop.0+0x10/0x10\n ? rt_mutex_slowunlock+0x26a/0x2e0\n ? skb_queue_purge_reason.part.0+0x1bf/0x230\n ? __pfx_rt_mutex_slowunlock+0x10/0x10\n ? skb_queue_purge_reason.part.0+0x1bf/0x230\n trace_kfree_skb_hit+0x15/0x20\n trace_kfree_skb+0xe9/0x150\n kfree_skb_reason+0x7b/0x110\n skb_queue_purge_reason.part.0+0x1bf/0x230\n ? __pfx_skb_queue_purge_reason.part.0+0x10/0x10\n ? mark_lock.part.0+0x8a/0x520\n...\n\ntrace_drop_common() also disables interrupts, but this is a minor issue\nbecause we could easily replace it with a local_lock.\n\nReplace the spin_lock with raw_spin_lock to avoid sleeping in atomic\ncontext.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-40980",
               url: "https://www.suse.com/security/cve/CVE-2024-40980",
            },
            {
               category: "external",
               summary: "SUSE Bug 1227937 for CVE-2024-40980",
               url: "https://bugzilla.suse.com/1227937",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-40980",
      },
      {
         cve: "CVE-2024-41055",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-41055",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: prevent derefencing NULL ptr in pfn_section_valid()\n\nCommit 5ec8e8ea8b77 (\"mm/sparsemem: fix race in accessing\nmemory_section->usage\") changed pfn_section_valid() to add a READ_ONCE()\ncall around \"ms->usage\" to fix a race with section_deactivate() where\nms->usage can be cleared.  The READ_ONCE() call, by itself, is not enough\nto prevent NULL pointer dereference.  We need to check its value before\ndereferencing it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-41055",
               url: "https://www.suse.com/security/cve/CVE-2024-41055",
            },
            {
               category: "external",
               summary: "SUSE Bug 1228521 for CVE-2024-41055",
               url: "https://bugzilla.suse.com/1228521",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-41055",
      },
      {
         cve: "CVE-2024-44974",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-44974",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: avoid possible UaF when selecting endp\n\nselect_local_address() and select_signal_address() both select an\nendpoint entry from the list inside an RCU protected section, but return\na reference to it, to be read later on. If the entry is dereferenced\nafter the RCU unlock, reading info could cause a Use-after-Free.\n\nA simple solution is to copy the required info while inside the RCU\nprotected section to avoid any risk of UaF later. The address ID might\nneed to be modified later to handle the ID0 case later, so a copy seems\nOK to deal with.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-44974",
               url: "https://www.suse.com/security/cve/CVE-2024-44974",
            },
            {
               category: "external",
               summary: "SUSE Bug 1230235 for CVE-2024-44974",
               url: "https://bugzilla.suse.com/1230235",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-44974",
      },
      {
         cve: "CVE-2024-45009",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-45009",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: only decrement add_addr_accepted for MPJ req\n\nAdding the following warning ...\n\n  WARN_ON_ONCE(msk->pm.add_addr_accepted == 0)\n\n... before decrementing the add_addr_accepted counter helped to find a\nbug when running the \"remove single subflow\" subtest from the\nmptcp_join.sh selftest.\n\nRemoving a 'subflow' endpoint will first trigger a RM_ADDR, then the\nsubflow closure. Before this patch, and upon the reception of the\nRM_ADDR, the other peer will then try to decrement this\nadd_addr_accepted. That's not correct because the attached subflows have\nnot been created upon the reception of an ADD_ADDR.\n\nA way to solve that is to decrement the counter only if the attached\nsubflow was an MP_JOIN to a remote id that was not 0, and initiated by\nthe host receiving the RM_ADDR.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-45009",
               url: "https://www.suse.com/security/cve/CVE-2024-45009",
            },
            {
               category: "external",
               summary: "SUSE Bug 1230438 for CVE-2024-45009",
               url: "https://bugzilla.suse.com/1230438",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "low",
            },
         ],
         title: "CVE-2024-45009",
      },
      {
         cve: "CVE-2024-45010",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-45010",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: only mark 'subflow' endp as available\n\nAdding the following warning ...\n\n  WARN_ON_ONCE(msk->pm.local_addr_used == 0)\n\n... before decrementing the local_addr_used counter helped to find a bug\nwhen running the \"remove single address\" subtest from the mptcp_join.sh\nselftests.\n\nRemoving a 'signal' endpoint will trigger the removal of all subflows\nlinked to this endpoint via mptcp_pm_nl_rm_addr_or_subflow() with\nrm_type == MPTCP_MIB_RMSUBFLOW. This will decrement the local_addr_used\ncounter, which is wrong in this case because this counter is linked to\n'subflow' endpoints, and here it is a 'signal' endpoint that is being\nremoved.\n\nNow, the counter is decremented, only if the ID is being used outside\nof mptcp_pm_nl_rm_addr_or_subflow(), only for 'subflow' endpoints, and\nif the ID is not 0 -- local_addr_used is not taking into account these\nones. This marking of the ID as being available, and the decrement is\ndone no matter if a subflow using this ID is currently available,\nbecause the subflow could have been closed before.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-45010",
               url: "https://www.suse.com/security/cve/CVE-2024-45010",
            },
            {
               category: "external",
               summary: "SUSE Bug 1230439 for CVE-2024-45010",
               url: "https://bugzilla.suse.com/1230439",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "low",
            },
         ],
         title: "CVE-2024-45010",
      },
      {
         cve: "CVE-2024-47701",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47701",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid OOB when system.data xattr changes underneath the filesystem\n\nWhen looking up for an entry in an inlined directory, if e_value_offs is\nchanged underneath the filesystem by some change in the block device, it\nwill lead to an out-of-bounds access that KASAN detects as an UAF.\n\nEXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.\nloop0: detected capacity change from 2048 to 2047\n==================================================================\nBUG: KASAN: use-after-free in ext4_search_dir+0xf2/0x1c0 fs/ext4/namei.c:1500\nRead of size 1 at addr ffff88803e91130f by task syz-executor269/5103\n\nCPU: 0 UID: 0 PID: 5103 Comm: syz-executor269 Not tainted 6.11.0-rc4-syzkaller #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n <TASK>\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n ext4_search_dir+0xf2/0x1c0 fs/ext4/namei.c:1500\n ext4_find_inline_entry+0x4be/0x5e0 fs/ext4/inline.c:1697\n __ext4_find_entry+0x2b4/0x1b30 fs/ext4/namei.c:1573\n ext4_lookup_entry fs/ext4/namei.c:1727 [inline]\n ext4_lookup+0x15f/0x750 fs/ext4/namei.c:1795\n lookup_one_qstr_excl+0x11f/0x260 fs/namei.c:1633\n filename_create+0x297/0x540 fs/namei.c:3980\n do_symlinkat+0xf9/0x3a0 fs/namei.c:4587\n __do_sys_symlinkat fs/namei.c:4610 [inline]\n __se_sys_symlinkat fs/namei.c:4607 [inline]\n __x64_sys_symlinkat+0x95/0xb0 fs/namei.c:4607\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f3e73ced469\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fff4d40c258 EFLAGS: 00000246 ORIG_RAX: 000000000000010a\nRAX: ffffffffffffffda RBX: 0032656c69662f2e RCX: 00007f3e73ced469\nRDX: 0000000020000200 RSI: 00000000ffffff9c RDI: 00000000200001c0\nRBP: 0000000000000000 R08: 00007fff4d40c290 R09: 00007fff4d40c290\nR10: 0023706f6f6c2f76 R11: 0000000000000246 R12: 00007fff4d40c27c\nR13: 0000000000000003 R14: 431bde82d7b634db R15: 00007fff4d40c2b0\n </TASK>\n\nCalling ext4_xattr_ibody_find right after reading the inode with\next4_get_inode_loc will lead to a check of the validity of the xattrs,\navoiding this problem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47701",
               url: "https://www.suse.com/security/cve/CVE-2024-47701",
            },
            {
               category: "external",
               summary: "SUSE Bug 1225742 for CVE-2024-47701",
               url: "https://bugzilla.suse.com/1225742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231920 for CVE-2024-47701",
               url: "https://bugzilla.suse.com/1231920",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47701",
      },
      {
         cve: "CVE-2024-49884",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-49884",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix slab-use-after-free in ext4_split_extent_at()\n\nWe hit the following use-after-free:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_split_extent_at+0xba8/0xcc0\nRead of size 2 at addr ffff88810548ed08 by task kworker/u20:0/40\nCPU: 0 PID: 40 Comm: kworker/u20:0 Not tainted 6.9.0-dirty #724\nCall Trace:\n <TASK>\n kasan_report+0x93/0xc0\n ext4_split_extent_at+0xba8/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nAllocated by task 40:\n __kmalloc_noprof+0x1ac/0x480\n ext4_find_extent+0xf3b/0x1e70\n ext4_ext_map_blocks+0x188/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nFreed by task 40:\n kfree+0xf1/0x2b0\n ext4_find_extent+0xa71/0x1e70\n ext4_ext_insert_extent+0xa22/0x3260\n ext4_split_extent_at+0x3ef/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n==================================================================\n\nThe flow of issue triggering is as follows:\n\next4_split_extent_at\n  path = *ppath\n  ext4_ext_insert_extent(ppath)\n    ext4_ext_create_new_leaf(ppath)\n      ext4_find_extent(orig_path)\n        path = *orig_path\n        read_extent_tree_block\n          // return -ENOMEM or -EIO\n        ext4_free_ext_path(path)\n          kfree(path)\n        *orig_path = NULL\n  a. If err is -ENOMEM:\n  ext4_ext_dirty(path + path->p_depth)\n  // path use-after-free !!!\n  b. If err is -EIO and we have EXT_DEBUG defined:\n  ext4_ext_show_leaf(path)\n    eh = path[depth].p_hdr\n    // path also use-after-free !!!\n\nSo when trying to zeroout or fix the extent length, call ext4_find_extent()\nto update the path.\n\nIn addition we use *ppath directly as an ext4_ext_show_leaf() input to\navoid possible use-after-free when EXT_DEBUG is defined, and to avoid\nunnecessary path updates.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-49884",
               url: "https://www.suse.com/security/cve/CVE-2024-49884",
            },
            {
               category: "external",
               summary: "SUSE Bug 1225742 for CVE-2024-49884",
               url: "https://bugzilla.suse.com/1225742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1232198 for CVE-2024-49884",
               url: "https://bugzilla.suse.com/1232198",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-49884",
      },
      {
         cve: "CVE-2024-49950",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-49950",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix uaf in l2cap_connect\n\n[Syzbot reported]\nBUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270 net/bluetooth/l2cap_core.c:3949\nRead of size 8 at addr ffff8880241e9800 by task kworker/u9:0/54\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nWorkqueue: hci2 hci_rx_work\nCall Trace:\n <TASK>\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc3/0x620 mm/kasan/report.c:488\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n l2cap_connect.constprop.0+0x10d8/0x1270 net/bluetooth/l2cap_core.c:3949\n l2cap_connect_req net/bluetooth/l2cap_core.c:4080 [inline]\n l2cap_bredr_sig_cmd net/bluetooth/l2cap_core.c:4772 [inline]\n l2cap_sig_channel net/bluetooth/l2cap_core.c:5543 [inline]\n l2cap_recv_frame+0xf0b/0x8eb0 net/bluetooth/l2cap_core.c:6825\n l2cap_recv_acldata+0x9b4/0xb70 net/bluetooth/l2cap_core.c:7514\n hci_acldata_packet net/bluetooth/hci_core.c:3791 [inline]\n hci_rx_work+0xaab/0x1610 net/bluetooth/hci_core.c:4028\n process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231\n process_scheduled_works kernel/workqueue.c:3312 [inline]\n worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389\n kthread+0x2c1/0x3a0 kernel/kthread.c:389\n ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n...\n\nFreed by task 5245:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:47\n kasan_save_track+0x14/0x30 mm/kasan/common.c:68\n kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579\n poison_slab_object+0xf7/0x160 mm/kasan/common.c:240\n __kasan_slab_free+0x32/0x50 mm/kasan/common.c:256\n kasan_slab_free include/linux/kasan.h:184 [inline]\n slab_free_hook mm/slub.c:2256 [inline]\n slab_free mm/slub.c:4477 [inline]\n kfree+0x12a/0x3b0 mm/slub.c:4598\n l2cap_conn_free net/bluetooth/l2cap_core.c:1810 [inline]\n kref_put include/linux/kref.h:65 [inline]\n l2cap_conn_put net/bluetooth/l2cap_core.c:1822 [inline]\n l2cap_conn_del+0x59d/0x730 net/bluetooth/l2cap_core.c:1802\n l2cap_connect_cfm+0x9e6/0xf80 net/bluetooth/l2cap_core.c:7241\n hci_connect_cfm include/net/bluetooth/hci_core.h:1960 [inline]\n hci_conn_failed+0x1c3/0x370 net/bluetooth/hci_conn.c:1265\n hci_abort_conn_sync+0x75a/0xb50 net/bluetooth/hci_sync.c:5583\n abort_conn_sync+0x197/0x360 net/bluetooth/hci_conn.c:2917\n hci_cmd_sync_work+0x1a4/0x410 net/bluetooth/hci_sync.c:328\n process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231\n process_scheduled_works kernel/workqueue.c:3312 [inline]\n worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389\n kthread+0x2c1/0x3a0 kernel/kthread.c:389\n ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-49950",
               url: "https://www.suse.com/security/cve/CVE-2024-49950",
            },
            {
               category: "external",
               summary: "SUSE Bug 1225742 for CVE-2024-49950",
               url: "https://bugzilla.suse.com/1225742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1232159 for CVE-2024-49950",
               url: "https://bugzilla.suse.com/1232159",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-49950",
      },
      {
         cve: "CVE-2024-50029",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50029",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync\n\nThis checks if the ACL connection remains valid as it could be destroyed\nwhile hci_enhanced_setup_sync is pending on cmd_sync leading to the\nfollowing trace:\n\nBUG: KASAN: slab-use-after-free in hci_enhanced_setup_sync+0x91b/0xa60\nRead of size 1 at addr ffff888002328ffd by task kworker/u5:2/37\n\nCPU: 0 UID: 0 PID: 37 Comm: kworker/u5:2 Not tainted 6.11.0-rc6-01300-g810be445d8d6 #7099\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n <TASK>\n dump_stack_lvl+0x5d/0x80\n ? hci_enhanced_setup_sync+0x91b/0xa60\n print_report+0x152/0x4c0\n ? hci_enhanced_setup_sync+0x91b/0xa60\n ? __virt_addr_valid+0x1fa/0x420\n ? hci_enhanced_setup_sync+0x91b/0xa60\n kasan_report+0xda/0x1b0\n ? hci_enhanced_setup_sync+0x91b/0xa60\n hci_enhanced_setup_sync+0x91b/0xa60\n ? __pfx_hci_enhanced_setup_sync+0x10/0x10\n ? __pfx___mutex_lock+0x10/0x10\n hci_cmd_sync_work+0x1c2/0x330\n process_one_work+0x7d9/0x1360\n ? __pfx_lock_acquire+0x10/0x10\n ? __pfx_process_one_work+0x10/0x10\n ? assign_work+0x167/0x240\n worker_thread+0x5b7/0xf60\n ? __kthread_parkme+0xac/0x1c0\n ? __pfx_worker_thread+0x10/0x10\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x293/0x360\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2f/0x70\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n </TASK>\n\nAllocated by task 34:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x8f/0xa0\n __hci_conn_add+0x187/0x17d0\n hci_connect_sco+0x2e1/0xb90\n sco_sock_connect+0x2a2/0xb80\n __sys_connect+0x227/0x2a0\n __x64_sys_connect+0x6d/0xb0\n do_syscall_64+0x71/0x140\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 37:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x101/0x160\n kfree+0xd0/0x250\n device_release+0x9a/0x210\n kobject_put+0x151/0x280\n hci_conn_del+0x448/0xbf0\n hci_abort_conn_sync+0x46f/0x980\n hci_cmd_sync_work+0x1c2/0x330\n process_one_work+0x7d9/0x1360\n worker_thread+0x5b7/0xf60\n kthread+0x293/0x360\n ret_from_fork+0x2f/0x70\n ret_from_fork_asm+0x1a/0x30",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50029",
               url: "https://www.suse.com/security/cve/CVE-2024-50029",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231949 for CVE-2024-50029",
               url: "https://bugzilla.suse.com/1231949",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50029",
      },
      {
         cve: "CVE-2024-50036",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50036",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: do not delay dst_entries_add() in dst_release()\n\ndst_entries_add() uses per-cpu data that might be freed at netns\ndismantle from ip6_route_net_exit() calling dst_entries_destroy()\n\nBefore ip6_route_net_exit() can be called, we release all\nthe dsts associated with this netns, via calls to dst_release(),\nwhich waits an rcu grace period before calling dst_destroy()\n\ndst_entries_add() use in dst_destroy() is racy, because\ndst_entries_destroy() could have been called already.\n\nDecrementing the number of dsts must happen sooner.\n\nNotes:\n\n1) in CONFIG_XFRM case, dst_destroy() can call\n   dst_release_immediate(child), this might also cause UAF\n   if the child does not have DST_NOCOUNT set.\n   IPSEC maintainers might take a look and see how to address this.\n\n2) There is also discussion about removing this count of dst,\n   which might happen in future kernels.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50036",
               url: "https://www.suse.com/security/cve/CVE-2024-50036",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231912 for CVE-2024-50036",
               url: "https://bugzilla.suse.com/1231912",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50036",
      },
      {
         cve: "CVE-2024-50073",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50073",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: n_gsm: Fix use-after-free in gsm_cleanup_mux\n\nBUG: KASAN: slab-use-after-free in gsm_cleanup_mux+0x77b/0x7b0\ndrivers/tty/n_gsm.c:3160 [n_gsm]\nRead of size 8 at addr ffff88815fe99c00 by task poc/3379\nCPU: 0 UID: 0 PID: 3379 Comm: poc Not tainted 6.11.0+ #56\nHardware name: VMware, Inc. VMware Virtual Platform/440BX\nDesktop Reference Platform, BIOS 6.00 11/12/2020\nCall Trace:\n <TASK>\n gsm_cleanup_mux+0x77b/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm]\n __pfx_gsm_cleanup_mux+0x10/0x10 drivers/tty/n_gsm.c:3124 [n_gsm]\n __pfx_sched_clock_cpu+0x10/0x10 kernel/sched/clock.c:389\n update_load_avg+0x1c1/0x27b0 kernel/sched/fair.c:4500\n __pfx_min_vruntime_cb_rotate+0x10/0x10 kernel/sched/fair.c:846\n __rb_insert_augmented+0x492/0xbf0 lib/rbtree.c:161\n gsmld_ioctl+0x395/0x1450 drivers/tty/n_gsm.c:3408 [n_gsm]\n _raw_spin_lock_irqsave+0x92/0xf0 arch/x86/include/asm/atomic.h:107\n __pfx_gsmld_ioctl+0x10/0x10 drivers/tty/n_gsm.c:3822 [n_gsm]\n ktime_get+0x5e/0x140 kernel/time/timekeeping.c:195\n ldsem_down_read+0x94/0x4e0 arch/x86/include/asm/atomic64_64.h:79\n __pfx_ldsem_down_read+0x10/0x10 drivers/tty/tty_ldsem.c:338\n __pfx_do_vfs_ioctl+0x10/0x10 fs/ioctl.c:805\n tty_ioctl+0x643/0x1100 drivers/tty/tty_io.c:2818\n\nAllocated by task 65:\n gsm_data_alloc.constprop.0+0x27/0x190 drivers/tty/n_gsm.c:926 [n_gsm]\n gsm_send+0x2c/0x580 drivers/tty/n_gsm.c:819 [n_gsm]\n gsm1_receive+0x547/0xad0 drivers/tty/n_gsm.c:3038 [n_gsm]\n gsmld_receive_buf+0x176/0x280 drivers/tty/n_gsm.c:3609 [n_gsm]\n tty_ldisc_receive_buf+0x101/0x1e0 drivers/tty/tty_buffer.c:391\n tty_port_default_receive_buf+0x61/0xa0 drivers/tty/tty_port.c:39\n flush_to_ldisc+0x1b0/0x750 drivers/tty/tty_buffer.c:445\n process_scheduled_works+0x2b0/0x10d0 kernel/workqueue.c:3229\n worker_thread+0x3dc/0x950 kernel/workqueue.c:3391\n kthread+0x2a3/0x370 kernel/kthread.c:389\n ret_from_fork+0x2d/0x70 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:257\n\nFreed by task 3367:\n kfree+0x126/0x420 mm/slub.c:4580\n gsm_cleanup_mux+0x36c/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm]\n gsmld_ioctl+0x395/0x1450 drivers/tty/n_gsm.c:3408 [n_gsm]\n tty_ioctl+0x643/0x1100 drivers/tty/tty_io.c:2818\n\n[Analysis]\ngsm_msg on the tx_ctrl_list or tx_data_list of gsm_mux\ncan be freed by multi threads through ioctl,which leads\nto the occurrence of uaf. Protect it by gsm tx lock.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50073",
               url: "https://www.suse.com/security/cve/CVE-2024-50073",
            },
            {
               category: "external",
               summary: "SUSE Bug 1225742 for CVE-2024-50073",
               url: "https://bugzilla.suse.com/1225742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1232520 for CVE-2024-50073",
               url: "https://bugzilla.suse.com/1232520",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-50073",
      },
      {
         cve: "CVE-2024-50085",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50085",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow\n\nSyzkaller reported this splat:\n\n  ==================================================================\n  BUG: KASAN: slab-use-after-free in mptcp_pm_nl_rm_addr_or_subflow+0xb44/0xcc0 net/mptcp/pm_netlink.c:881\n  Read of size 4 at addr ffff8880569ac858 by task syz.1.2799/14662\n\n  CPU: 0 UID: 0 PID: 14662 Comm: syz.1.2799 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\n  Call Trace:\n   <TASK>\n   __dump_stack lib/dump_stack.c:94 [inline]\n   dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120\n   print_address_description mm/kasan/report.c:377 [inline]\n   print_report+0xc3/0x620 mm/kasan/report.c:488\n   kasan_report+0xd9/0x110 mm/kasan/report.c:601\n   mptcp_pm_nl_rm_addr_or_subflow+0xb44/0xcc0 net/mptcp/pm_netlink.c:881\n   mptcp_pm_nl_rm_subflow_received net/mptcp/pm_netlink.c:914 [inline]\n   mptcp_nl_remove_id_zero_address+0x305/0x4a0 net/mptcp/pm_netlink.c:1572\n   mptcp_pm_nl_del_addr_doit+0x5c9/0x770 net/mptcp/pm_netlink.c:1603\n   genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115\n   genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]\n   genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210\n   netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2551\n   genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219\n   netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]\n   netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357\n   netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901\n   sock_sendmsg_nosec net/socket.c:729 [inline]\n   __sock_sendmsg net/socket.c:744 [inline]\n   ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2607\n   ___sys_sendmsg+0x135/0x1e0 net/socket.c:2661\n   __sys_sendmsg+0x117/0x1f0 net/socket.c:2690\n   do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]\n   __do_fast_syscall_32+0x73/0x120 arch/x86/entry/common.c:386\n   do_fast_syscall_32+0x32/0x80 arch/x86/entry/common.c:411\n   entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n  RIP: 0023:0xf7fe4579\n  Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00\n  RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172\n  RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000140\n  RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n  RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000\n  R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\n   </TASK>\n\n  Allocated by task 5387:\n   kasan_save_stack+0x33/0x60 mm/kasan/common.c:47\n   kasan_save_track+0x14/0x30 mm/kasan/common.c:68\n   poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n   __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394\n   kmalloc_noprof include/linux/slab.h:878 [inline]\n   kzalloc_noprof include/linux/slab.h:1014 [inline]\n   subflow_create_ctx+0x87/0x2a0 net/mptcp/subflow.c:1803\n   subflow_ulp_init+0xc3/0x4d0 net/mptcp/subflow.c:1956\n   __tcp_set_ulp net/ipv4/tcp_ulp.c:146 [inline]\n   tcp_set_ulp+0x326/0x7f0 net/ipv4/tcp_ulp.c:167\n   mptcp_subflow_create_socket+0x4ae/0x10a0 net/mptcp/subflow.c:1764\n   __mptcp_subflow_connect+0x3cc/0x1490 net/mptcp/subflow.c:1592\n   mptcp_pm_create_subflow_or_signal_addr+0xbda/0x23a0 net/mptcp/pm_netlink.c:642\n   mptcp_pm_nl_fully_established net/mptcp/pm_netlink.c:650 [inline]\n   mptcp_pm_nl_work+0x3a1/0x4f0 net/mptcp/pm_netlink.c:943\n   mptcp_worker+0x15a/0x1240 net/mptcp/protocol.c:2777\n   process_one_work+0x958/0x1b30 kernel/workqueue.c:3229\n   process_scheduled_works kernel/workqueue.c:3310 [inline]\n   worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391\n   kthread+0x2c1/0x3a0 kernel/kthread.c:389\n   ret_from_fork+0x45/0x80 arch/x86/ke\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50085",
               url: "https://www.suse.com/security/cve/CVE-2024-50085",
            },
            {
               category: "external",
               summary: "SUSE Bug 1232508 for CVE-2024-50085",
               url: "https://bugzilla.suse.com/1232508",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50085",
      },
      {
         cve: "CVE-2024-50115",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50115",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory\n\nIgnore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits\n4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't\nenforce 32-byte alignment of nCR3.\n\nIn the absolute worst case scenario, failure to ignore bits 4:0 can result\nin an out-of-bounds read, e.g. if the target page is at the end of a\nmemslot, and the VMM isn't using guard pages.\n\nPer the APM:\n\n  The CR3 register points to the base address of the page-directory-pointer\n  table. The page-directory-pointer table is aligned on a 32-byte boundary,\n  with the low 5 address bits 4:0 assumed to be 0.\n\nAnd the SDM's much more explicit:\n\n  4:0    Ignored\n\nNote, KVM gets this right when loading PDPTRs, it's only the nSVM flow\nthat is broken.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50115",
               url: "https://www.suse.com/security/cve/CVE-2024-50115",
            },
            {
               category: "external",
               summary: "SUSE Bug 1225742 for CVE-2024-50115",
               url: "https://bugzilla.suse.com/1225742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1232919 for CVE-2024-50115",
               url: "https://bugzilla.suse.com/1232919",
            },
            {
               category: "external",
               summary: "SUSE Bug 1233019 for CVE-2024-50115",
               url: "https://bugzilla.suse.com/1233019",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-50115",
      },
      {
         cve: "CVE-2024-50142",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50142",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: validate new SA's prefixlen using SA family when sel.family is unset\n\nThis expands the validation introduced in commit 07bf7908950a (\"xfrm:\nValidate address prefix lengths in the xfrm selector.\")\n\nsyzbot created an SA with\n    usersa.sel.family = AF_UNSPEC\n    usersa.sel.prefixlen_s = 128\n    usersa.family = AF_INET\n\nBecause of the AF_UNSPEC selector, verify_newsa_info doesn't put\nlimits on prefixlen_{s,d}. But then copy_from_user_state sets\nx->sel.family to usersa.family (AF_INET). Do the same conversion in\nverify_newsa_info before validating prefixlen_{s,d}, since that's how\nprefixlen is going to be used later on.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50142",
               url: "https://www.suse.com/security/cve/CVE-2024-50142",
            },
            {
               category: "external",
               summary: "SUSE Bug 1233028 for CVE-2024-50142",
               url: "https://bugzilla.suse.com/1233028",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50142",
      },
      {
         cve: "CVE-2024-50185",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50185",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: handle consistently DSS corruption\n\nBugged peer implementation can send corrupted DSS options, consistently\nhitting a few warning in the data path. Use DEBUG_NET assertions, to\navoid the splat on some builds and handle consistently the error, dumping\nrelated MIBs and performing fallback and/or reset according to the\nsubflow type.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50185",
               url: "https://www.suse.com/security/cve/CVE-2024-50185",
            },
            {
               category: "external",
               summary: "SUSE Bug 1233109 for CVE-2024-50185",
               url: "https://bugzilla.suse.com/1233109",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50185",
      },
      {
         cve: "CVE-2024-50294",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50294",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix missing locking causing hanging calls\n\nIf a call gets aborted (e.g. because kafs saw a signal) between it being\nqueued for connection and the I/O thread picking up the call, the abort\nwill be prioritised over the connection and it will be removed from\nlocal->new_client_calls by rxrpc_disconnect_client_call() without a lock\nbeing held.  This may cause other calls on the list to disappear if a race\noccurs.\n\nFix this by taking the client_call_lock when removing a call from whatever\nlist its ->wait_link happens to be on.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50294",
               url: "https://www.suse.com/security/cve/CVE-2024-50294",
            },
            {
               category: "external",
               summary: "SUSE Bug 1233483 for CVE-2024-50294",
               url: "https://bugzilla.suse.com/1233483",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50294",
      },
      {
         cve: "CVE-2024-53123",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53123",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: error out earlier on disconnect\n\nEric reported a division by zero splat in the MPTCP protocol:\n\nOops: divide error: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 6094 Comm: syz-executor317 Not tainted\n6.12.0-rc5-syzkaller-00291-g05b92660cdfe #0\nHardware name: Google Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nRIP: 0010:__tcp_select_window+0x5b4/0x1310 net/ipv4/tcp_output.c:3163\nCode: f6 44 01 e3 89 df e8 9b 75 09 f8 44 39 f3 0f 8d 11 ff ff ff e8\n0d 74 09 f8 45 89 f4 e9 04 ff ff ff e8 00 74 09 f8 44 89 f0 99 <f7> 7c\n24 14 41 29 d6 45 89 f4 e9 ec fe ff ff e8 e8 73 09 f8 48 89\nRSP: 0018:ffffc900041f7930 EFLAGS: 00010293\nRAX: 0000000000017e67 RBX: 0000000000017e67 RCX: ffffffff8983314b\nRDX: 0000000000000000 RSI: ffffffff898331b0 RDI: 0000000000000004\nRBP: 00000000005d6000 R08: 0000000000000004 R09: 0000000000017e67\nR10: 0000000000003e80 R11: 0000000000000000 R12: 0000000000003e80\nR13: ffff888031d9b440 R14: 0000000000017e67 R15: 00000000002eb000\nFS: 00007feb5d7f16c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007feb5d8adbb8 CR3: 0000000074e4c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n<TASK>\n__tcp_cleanup_rbuf+0x3e7/0x4b0 net/ipv4/tcp.c:1493\nmptcp_rcv_space_adjust net/mptcp/protocol.c:2085 [inline]\nmptcp_recvmsg+0x2156/0x2600 net/mptcp/protocol.c:2289\ninet_recvmsg+0x469/0x6a0 net/ipv4/af_inet.c:885\nsock_recvmsg_nosec net/socket.c:1051 [inline]\nsock_recvmsg+0x1b2/0x250 net/socket.c:1073\n__sys_recvfrom+0x1a5/0x2e0 net/socket.c:2265\n__do_sys_recvfrom net/socket.c:2283 [inline]\n__se_sys_recvfrom net/socket.c:2279 [inline]\n__x64_sys_recvfrom+0xe0/0x1c0 net/socket.c:2279\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7feb5d857559\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48\n89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d\n01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007feb5d7f1208 EFLAGS: 00000246 ORIG_RAX: 000000000000002d\nRAX: ffffffffffffffda RBX: 00007feb5d8e1318 RCX: 00007feb5d857559\nRDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003\nRBP: 00007feb5d8e1310 R08: 0000000000000000 R09: ffffffff81000000\nR10: 0000000000000100 R11: 0000000000000246 R12: 00007feb5d8e131c\nR13: 00007feb5d8ae074 R14: 000000800000000e R15: 00000000fffffdef\n\nand provided a nice reproducer.\n\nThe root cause is the current bad handling of racing disconnect.\nAfter the blamed commit below, sk_wait_data() can return (with\nerror) with the underlying socket disconnected and a zero rcv_mss.\n\nCatch the error and return without performing any additional\noperations on the current socket.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53123",
               url: "https://www.suse.com/security/cve/CVE-2024-53123",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234070 for CVE-2024-53123",
               url: "https://bugzilla.suse.com/1234070",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-53123",
      },
      {
         cve: "CVE-2024-53147",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53147",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix out-of-bounds access of directory entries\n\nIn the case of the directory size is greater than or equal to\nthe cluster size, if start_clu becomes an EOF cluster(an invalid\ncluster) due to file system corruption, then the directory entry\nwhere ei->hint_femp.eidx hint is outside the directory, resulting\nin an out-of-bounds access, which may cause further file system\ncorruption.\n\nThis commit adds a check for start_clu, if it is an invalid cluster,\nthe file or directory will be treated as empty.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53147",
               url: "https://www.suse.com/security/cve/CVE-2024-53147",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234857 for CVE-2024-53147",
               url: "https://bugzilla.suse.com/1234857",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-53147",
      },
      {
         cve: "CVE-2024-53173",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53173",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.0: Fix a use-after-free problem in the asynchronous open()\n\nYang Erkun reports that when two threads are opening files at the same\ntime, and are forced to abort before a reply is seen, then the call to\nnfs_release_seqid() in nfs4_opendata_free() can result in a\nuse-after-free of the pointer to the defunct rpc task of the other\nthread.\nThe fix is to ensure that if the RPC call is aborted before the call to\nnfs_wait_on_sequence() is complete, then we must call nfs_release_seqid()\nin nfs4_open_release() before the rpc_task is freed.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53173",
               url: "https://www.suse.com/security/cve/CVE-2024-53173",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234853 for CVE-2024-53173",
               url: "https://bugzilla.suse.com/1234853",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234891 for CVE-2024-53173",
               url: "https://bugzilla.suse.com/1234891",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234892 for CVE-2024-53173",
               url: "https://bugzilla.suse.com/1234892",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-53173",
      },
      {
         cve: "CVE-2024-53176",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53176",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: During unmount, ensure all cached dir instances drop their dentry\n\nThe unmount process (cifs_kill_sb() calling close_all_cached_dirs()) can\nrace with various cached directory operations, which ultimately results\nin dentries not being dropped and these kernel BUGs:\n\nBUG: Dentry ffff88814f37e358{i=1000000000080,n=/}  still in use (2) [unmount of cifs cifs]\nVFS: Busy inodes after unmount of cifs (cifs)\n------------[ cut here ]------------\nkernel BUG at fs/super.c:661!\n\nThis happens when a cfid is in the process of being cleaned up when, and\nhas been removed from the cfids->entries list, including:\n\n- Receiving a lease break from the server\n- Server reconnection triggers invalidate_all_cached_dirs(), which\n  removes all the cfids from the list\n- The laundromat thread decides to expire an old cfid.\n\nTo solve these problems, dropping the dentry is done in queued work done\nin a newly-added cfid_put_wq workqueue, and close_all_cached_dirs()\nflushes that workqueue after it drops all the dentries of which it's\naware. This is a global workqueue (rather than scoped to a mount), but\nthe queued work is minimal.\n\nThe final cleanup work for cleaning up a cfid is performed via work\nqueued in the serverclose_wq workqueue; this is done separate from\ndropping the dentries so that close_all_cached_dirs() doesn't block on\nany server operations.\n\nBoth of these queued works expect to invoked with a cfid reference and\na tcon reference to avoid those objects from being freed while the work\nis ongoing.\n\nWhile we're here, add proper locking to close_all_cached_dirs(), and\nlocking around the freeing of cfid->dentry.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53176",
               url: "https://www.suse.com/security/cve/CVE-2024-53176",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234894 for CVE-2024-53176",
               url: "https://bugzilla.suse.com/1234894",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-53176",
      },
      {
         cve: "CVE-2024-53177",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53177",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: prevent use-after-free due to open_cached_dir error paths\n\nIf open_cached_dir() encounters an error parsing the lease from the\nserver, the error handling may race with receiving a lease break,\nresulting in open_cached_dir() freeing the cfid while the queued work is\npending.\n\nUpdate open_cached_dir() to drop refs rather than directly freeing the\ncfid.\n\nHave cached_dir_lease_break(), cfids_laundromat_worker(), and\ninvalidate_all_cached_dirs() clear has_lease immediately while still\nholding cfids->cfid_list_lock, and then use this to also simplify the\nreference counting in cfids_laundromat_worker() and\ninvalidate_all_cached_dirs().\n\nFixes this KASAN splat (which manually injects an error and lease break\nin open_cached_dir()):\n\n==================================================================\nBUG: KASAN: slab-use-after-free in smb2_cached_lease_break+0x27/0xb0\nRead of size 8 at addr ffff88811cc24c10 by task kworker/3:1/65\n\nCPU: 3 UID: 0 PID: 65 Comm: kworker/3:1 Not tainted 6.12.0-rc6-g255cf264e6e5-dirty #87\nHardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020\nWorkqueue: cifsiod smb2_cached_lease_break\nCall Trace:\n <TASK>\n dump_stack_lvl+0x77/0xb0\n print_report+0xce/0x660\n kasan_report+0xd3/0x110\n smb2_cached_lease_break+0x27/0xb0\n process_one_work+0x50a/0xc50\n worker_thread+0x2ba/0x530\n kthread+0x17c/0x1c0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n </TASK>\n\nAllocated by task 2464:\n kasan_save_stack+0x33/0x60\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n open_cached_dir+0xa7d/0x1fb0\n smb2_query_path_info+0x43c/0x6e0\n cifs_get_fattr+0x346/0xf10\n cifs_get_inode_info+0x157/0x210\n cifs_revalidate_dentry_attr+0x2d1/0x460\n cifs_getattr+0x173/0x470\n vfs_statx_path+0x10f/0x160\n vfs_statx+0xe9/0x150\n vfs_fstatat+0x5e/0xc0\n __do_sys_newfstatat+0x91/0xf0\n do_syscall_64+0x95/0x1a0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 2464:\n kasan_save_stack+0x33/0x60\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x51/0x70\n kfree+0x174/0x520\n open_cached_dir+0x97f/0x1fb0\n smb2_query_path_info+0x43c/0x6e0\n cifs_get_fattr+0x346/0xf10\n cifs_get_inode_info+0x157/0x210\n cifs_revalidate_dentry_attr+0x2d1/0x460\n cifs_getattr+0x173/0x470\n vfs_statx_path+0x10f/0x160\n vfs_statx+0xe9/0x150\n vfs_fstatat+0x5e/0xc0\n __do_sys_newfstatat+0x91/0xf0\n do_syscall_64+0x95/0x1a0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nLast potentially related work creation:\n kasan_save_stack+0x33/0x60\n __kasan_record_aux_stack+0xad/0xc0\n insert_work+0x32/0x100\n __queue_work+0x5c9/0x870\n queue_work_on+0x82/0x90\n open_cached_dir+0x1369/0x1fb0\n smb2_query_path_info+0x43c/0x6e0\n cifs_get_fattr+0x346/0xf10\n cifs_get_inode_info+0x157/0x210\n cifs_revalidate_dentry_attr+0x2d1/0x460\n cifs_getattr+0x173/0x470\n vfs_statx_path+0x10f/0x160\n vfs_statx+0xe9/0x150\n vfs_fstatat+0x5e/0xc0\n __do_sys_newfstatat+0x91/0xf0\n do_syscall_64+0x95/0x1a0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThe buggy address belongs to the object at ffff88811cc24c00\n which belongs to the cache kmalloc-1k of size 1024\nThe buggy address is located 16 bytes inside of\n freed 1024-byte region [ffff88811cc24c00, ffff88811cc25000)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53177",
               url: "https://www.suse.com/security/cve/CVE-2024-53177",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234896 for CVE-2024-53177",
               url: "https://bugzilla.suse.com/1234896",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235103 for CVE-2024-53177",
               url: "https://bugzilla.suse.com/1235103",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-53177",
      },
      {
         cve: "CVE-2024-53178",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53178",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Don't leak cfid when reconnect races with open_cached_dir\n\nopen_cached_dir() may either race with the tcon reconnection even before\ncompound_send_recv() or directly trigger a reconnection via\nSMB2_open_init() or SMB_query_info_init().\n\nThe reconnection process invokes invalidate_all_cached_dirs() via\ncifs_mark_open_files_invalid(), which removes all cfids from the\ncfids->entries list but doesn't drop a ref if has_lease isn't true. This\nresults in the currently-being-constructed cfid not being on the list,\nbut still having a refcount of 2. It leaks if returned from\nopen_cached_dir().\n\nFix this by setting cfid->has_lease when the ref is actually taken; the\ncfid will not be used by other threads until it has a valid time.\n\nAddresses these kmemleaks:\n\nunreferenced object 0xffff8881090c4000 (size 1024):\n  comm \"bash\", pid 1860, jiffies 4295126592\n  hex dump (first 32 bytes):\n    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........\".......\n    00 ca 45 22 81 88 ff ff f8 dc 4f 04 81 88 ff ff  ..E\"......O.....\n  backtrace (crc 6f58c20f):\n    [<ffffffff8b895a1e>] __kmalloc_cache_noprof+0x2be/0x350\n    [<ffffffff8bda06e3>] open_cached_dir+0x993/0x1fb0\n    [<ffffffff8bdaa750>] cifs_readdir+0x15a0/0x1d50\n    [<ffffffff8b9a853f>] iterate_dir+0x28f/0x4b0\n    [<ffffffff8b9a9aed>] __x64_sys_getdents64+0xfd/0x200\n    [<ffffffff8cf6da05>] do_syscall_64+0x95/0x1a0\n    [<ffffffff8d00012f>] entry_SYSCALL_64_after_hwframe+0x76/0x7e\nunreferenced object 0xffff8881044fdcf8 (size 8):\n  comm \"bash\", pid 1860, jiffies 4295126592\n  hex dump (first 8 bytes):\n    00 cc cc cc cc cc cc cc                          ........\n  backtrace (crc 10c106a9):\n    [<ffffffff8b89a3d3>] __kmalloc_node_track_caller_noprof+0x363/0x480\n    [<ffffffff8b7d7256>] kstrdup+0x36/0x60\n    [<ffffffff8bda0700>] open_cached_dir+0x9b0/0x1fb0\n    [<ffffffff8bdaa750>] cifs_readdir+0x15a0/0x1d50\n    [<ffffffff8b9a853f>] iterate_dir+0x28f/0x4b0\n    [<ffffffff8b9a9aed>] __x64_sys_getdents64+0xfd/0x200\n    [<ffffffff8cf6da05>] do_syscall_64+0x95/0x1a0\n    [<ffffffff8d00012f>] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nAnd addresses these BUG splats when unmounting the SMB filesystem:\n\nBUG: Dentry ffff888140590ba0{i=1000000000080,n=/}  still in use (2) [unmount of cifs cifs]\nWARNING: CPU: 3 PID: 3433 at fs/dcache.c:1536 umount_check+0xd0/0x100\nModules linked in:\nCPU: 3 UID: 0 PID: 3433 Comm: bash Not tainted 6.12.0-rc4-g850925a8133c-dirty #49\nHardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020\nRIP: 0010:umount_check+0xd0/0x100\nCode: 8d 7c 24 40 e8 31 5a f4 ff 49 8b 54 24 40 41 56 49 89 e9 45 89 e8 48 89 d9 41 57 48 89 de 48 c7 c7 80 e7 db ac e8 f0 72 9a ff <0f> 0b 58 31 c0 5a 5b 5d 41 5c 41 5d 41 5e 41 5f e9 2b e5 5d 01 41\nRSP: 0018:ffff88811cc27978 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff888140590ba0 RCX: ffffffffaaf20bae\nRDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8881f6fb6f40\nRBP: ffff8881462ec000 R08: 0000000000000001 R09: ffffed1023984ee3\nR10: ffff88811cc2771f R11: 00000000016cfcc0 R12: ffff888134383e08\nR13: 0000000000000002 R14: ffff8881462ec668 R15: ffffffffaceab4c0\nFS:  00007f23bfa98740(0000) GS:ffff8881f6f80000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556de4a6f808 CR3: 0000000123c80000 CR4: 0000000000350ef0\nCall Trace:\n <TASK>\n d_walk+0x6a/0x530\n shrink_dcache_for_umount+0x6a/0x200\n generic_shutdown_super+0x52/0x2a0\n kill_anon_super+0x22/0x40\n cifs_kill_sb+0x159/0x1e0\n deactivate_locked_super+0x66/0xe0\n cleanup_mnt+0x140/0x210\n task_work_run+0xfb/0x170\n syscall_exit_to_user_mode+0x29f/0x2b0\n do_syscall_64+0xa1/0x1a0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\nRIP: 0033:0x7f23bfb93ae7\nCode: ff ff ff ff c3 66 0f 1f 44 00 00 48 8b 0d 11 93 0d 00 f7 d8 64 89 01 b8 ff ff ff ff eb bf 0f 1f 44 00 00 b8 50 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e9 92 0d 00 f7 d8 64 89 \n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53178",
               url: "https://www.suse.com/security/cve/CVE-2024-53178",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234895 for CVE-2024-53178",
               url: "https://bugzilla.suse.com/1234895",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-53178",
      },
      {
         cve: "CVE-2024-53226",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53226",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()\n\nib_map_mr_sg() allows ULPs to specify NULL as the sg_offset argument.\nThe driver needs to check whether it is a NULL pointer before\ndereferencing it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53226",
               url: "https://www.suse.com/security/cve/CVE-2024-53226",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236576 for CVE-2024-53226",
               url: "https://bugzilla.suse.com/1236576",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-53226",
      },
      {
         cve: "CVE-2024-53239",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-53239",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort().  But at this moment, the card object\nmight be still in use (as we're calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card's\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-53239",
               url: "https://www.suse.com/security/cve/CVE-2024-53239",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234853 for CVE-2024-53239",
               url: "https://bugzilla.suse.com/1234853",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235054 for CVE-2024-53239",
               url: "https://bugzilla.suse.com/1235054",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235055 for CVE-2024-53239",
               url: "https://bugzilla.suse.com/1235055",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-53239",
      },
      {
         cve: "CVE-2024-56539",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56539",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()\n\nReplace one-element array with a flexible-array member in `struct\nmwifiex_ie_types_wildcard_ssid_params` to fix the following warning\non a MT8173 Chromebook (mt8173-elm-hana):\n\n[  356.775250] ------------[ cut here ]------------\n[  356.784543] memcpy: detected field-spanning write (size 6) of single field \"wildcard_ssid_tlv->ssid\" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1)\n[  356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex]\n\nThe \"(size 6)\" above is exactly the length of the SSID of the network\nthis device was connected to. The source of the warning looks like:\n\n    ssid_len = user_scan_in->ssid_list[i].ssid_len;\n    [...]\n    memcpy(wildcard_ssid_tlv->ssid,\n           user_scan_in->ssid_list[i].ssid, ssid_len);\n\nThere is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this\nstruct, but it already didn't account for the size of the one-element\narray, so it doesn't need to be changed.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56539",
               url: "https://www.suse.com/security/cve/CVE-2024-56539",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234853 for CVE-2024-56539",
               url: "https://bugzilla.suse.com/1234853",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234963 for CVE-2024-56539",
               url: "https://bugzilla.suse.com/1234963",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234964 for CVE-2024-56539",
               url: "https://bugzilla.suse.com/1234964",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-56539",
      },
      {
         cve: "CVE-2024-56548",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56548",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don't query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[  419.944641] ==================================================================\n[  419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[  419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[  419.947612]\n[  419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[  419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[  419.950035] Call Trace:\n[  419.950384]  <TASK>\n[  419.950676]  dump_stack_lvl+0x57/0x78\n[  419.951212]  ? hfsplus_read_wrapper+0x659/0xa0a\n[  419.951830]  print_report+0x14c/0x49e\n[  419.952361]  ? __virt_addr_valid+0x267/0x278\n[  419.952979]  ? kmem_cache_debug_flags+0xc/0x1d\n[  419.953561]  ? hfsplus_read_wrapper+0x659/0xa0a\n[  419.954231]  kasan_report+0x89/0xb0\n[  419.954748]  ? hfsplus_read_wrapper+0x659/0xa0a\n[  419.955367]  hfsplus_read_wrapper+0x659/0xa0a\n[  419.955948]  ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[  419.956618]  ? do_raw_spin_unlock+0x59/0x1a9\n[  419.957214]  ? _raw_spin_unlock+0x1a/0x2e\n[  419.957772]  hfsplus_fill_super+0x348/0x1590\n[  419.958355]  ? hlock_class+0x4c/0x109\n[  419.958867]  ? __pfx_hfsplus_fill_super+0x10/0x10\n[  419.959499]  ? __pfx_string+0x10/0x10\n[  419.960006]  ? lock_acquire+0x3e2/0x454\n[  419.960532]  ? bdev_name.constprop.0+0xce/0x243\n[  419.961129]  ? __pfx_bdev_name.constprop.0+0x10/0x10\n[  419.961799]  ? pointer+0x3f0/0x62f\n[  419.962277]  ? __pfx_pointer+0x10/0x10\n[  419.962761]  ? vsnprintf+0x6c4/0xfba\n[  419.963178]  ? __pfx_vsnprintf+0x10/0x10\n[  419.963621]  ? setup_bdev_super+0x376/0x3b3\n[  419.964029]  ? snprintf+0x9d/0xd2\n[  419.964344]  ? __pfx_snprintf+0x10/0x10\n[  419.964675]  ? lock_acquired+0x45c/0x5e9\n[  419.965016]  ? set_blocksize+0x139/0x1c1\n[  419.965381]  ? sb_set_blocksize+0x6d/0xae\n[  419.965742]  ? __pfx_hfsplus_fill_super+0x10/0x10\n[  419.966179]  mount_bdev+0x12f/0x1bf\n[  419.966512]  ? __pfx_mount_bdev+0x10/0x10\n[  419.966886]  ? vfs_parse_fs_string+0xce/0x111\n[  419.967293]  ? __pfx_vfs_parse_fs_string+0x10/0x10\n[  419.967702]  ? __pfx_hfsplus_mount+0x10/0x10\n[  419.968073]  legacy_get_tree+0x104/0x178\n[  419.968414]  vfs_get_tree+0x86/0x296\n[  419.968751]  path_mount+0xba3/0xd0b\n[  419.969157]  ? __pfx_path_mount+0x10/0x10\n[  419.969594]  ? kmem_cache_free+0x1e2/0x260\n[  419.970311]  do_mount+0x99/0xe0\n[  419.970630]  ? __pfx_do_mount+0x10/0x10\n[  419.971008]  __do_sys_mount+0x199/0x1c9\n[  419.971397]  do_syscall_64+0xd0/0x135\n[  419.971761]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[  419.972233] RIP: 0033:0x7c3cb812972e\n[  419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[  419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[  419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[  419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56548",
               url: "https://www.suse.com/security/cve/CVE-2024-56548",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234853 for CVE-2024-56548",
               url: "https://bugzilla.suse.com/1234853",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235073 for CVE-2024-56548",
               url: "https://bugzilla.suse.com/1235073",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235074 for CVE-2024-56548",
               url: "https://bugzilla.suse.com/1235074",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-56548",
      },
      {
         cve: "CVE-2024-56579",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56579",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: amphion: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56579",
               url: "https://www.suse.com/security/cve/CVE-2024-56579",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236575 for CVE-2024-56579",
               url: "https://bugzilla.suse.com/1236575",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-56579",
      },
      {
         cve: "CVE-2024-56605",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56605",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()\n\nbt_sock_alloc() allocates the sk object and attaches it to the provided\nsock object. On error l2cap_sock_alloc() frees the sk object, but the\ndangling pointer is still attached to the sock object, which may create\nuse-after-free in other code.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56605",
               url: "https://www.suse.com/security/cve/CVE-2024-56605",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234853 for CVE-2024-56605",
               url: "https://bugzilla.suse.com/1234853",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235061 for CVE-2024-56605",
               url: "https://bugzilla.suse.com/1235061",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235062 for CVE-2024-56605",
               url: "https://bugzilla.suse.com/1235062",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-56605",
      },
      {
         cve: "CVE-2024-56633",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56633",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg\n\nThe current sk memory accounting logic in __SK_REDIRECT is pre-uncharging\ntosend bytes, which is either msg->sg.size or a smaller value apply_bytes.\n\nPotential problems with this strategy are as follows:\n\n- If the actual sent bytes are smaller than tosend, we need to charge some\n  bytes back, as in line 487, which is okay but seems not clean.\n\n- When tosend is set to apply_bytes, as in line 417, and (ret < 0), we may\n  miss uncharging (msg->sg.size - apply_bytes) bytes.\n\n[...]\n415 tosend = msg->sg.size;\n416 if (psock->apply_bytes && psock->apply_bytes < tosend)\n417   tosend = psock->apply_bytes;\n[...]\n443 sk_msg_return(sk, msg, tosend);\n444 release_sock(sk);\n446 origsize = msg->sg.size;\n447 ret = tcp_bpf_sendmsg_redir(sk_redir, redir_ingress,\n448                             msg, tosend, flags);\n449 sent = origsize - msg->sg.size;\n[...]\n454 lock_sock(sk);\n455 if (unlikely(ret < 0)) {\n456   int free = sk_msg_free_nocharge(sk, msg);\n458   if (!cork)\n459     *copied -= free;\n460 }\n[...]\n487 if (eval == __SK_REDIRECT)\n488   sk_mem_charge(sk, tosend - sent);\n[...]\n\nWhen running the selftest test_txmsg_redir_wait_sndmem with txmsg_apply,\nthe following warning will be reported:\n\n------------[ cut here ]------------\nWARNING: CPU: 6 PID: 57 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x190/0x1a0\nModules linked in:\nCPU: 6 UID: 0 PID: 57 Comm: kworker/6:0 Not tainted 6.12.0-rc1.bm.1-amd64+ #43\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014\nWorkqueue: events sk_psock_destroy\nRIP: 0010:inet_sock_destruct+0x190/0x1a0\nRSP: 0018:ffffad0a8021fe08 EFLAGS: 00010206\nRAX: 0000000000000011 RBX: ffff9aab4475b900 RCX: ffff9aab481a0800\nRDX: 0000000000000303 RSI: 0000000000000011 RDI: ffff9aab4475b900\nRBP: ffff9aab4475b990 R08: 0000000000000000 R09: ffff9aab40050ec0\nR10: 0000000000000000 R11: ffff9aae6fdb1d01 R12: ffff9aab49c60400\nR13: ffff9aab49c60598 R14: ffff9aab49c60598 R15: dead000000000100\nFS:  0000000000000000(0000) GS:ffff9aae6fd80000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007ffec7e47bd8 CR3: 00000001a1a1c004 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n<TASK>\n? __warn+0x89/0x130\n? inet_sock_destruct+0x190/0x1a0\n? report_bug+0xfc/0x1e0\n? handle_bug+0x5c/0xa0\n? exc_invalid_op+0x17/0x70\n? asm_exc_invalid_op+0x1a/0x20\n? inet_sock_destruct+0x190/0x1a0\n__sk_destruct+0x25/0x220\nsk_psock_destroy+0x2b2/0x310\nprocess_scheduled_works+0xa3/0x3e0\nworker_thread+0x117/0x240\n? __pfx_worker_thread+0x10/0x10\nkthread+0xcf/0x100\n? __pfx_kthread+0x10/0x10\nret_from_fork+0x31/0x40\n? __pfx_kthread+0x10/0x10\nret_from_fork_asm+0x1a/0x30\n</TASK>\n---[ end trace 0000000000000000 ]---\n\nIn __SK_REDIRECT, a more concise way is delaying the uncharging after sent\nbytes are finalized, and uncharge this value. When (ret < 0), we shall\ninvoke sk_msg_free.\n\nSame thing happens in case __SK_DROP, when tosend is set to apply_bytes,\nwe may miss uncharging (msg->sg.size - apply_bytes) bytes. The same\nwarning will be reported in selftest.\n\n[...]\n468 case __SK_DROP:\n469 default:\n470 sk_msg_free_partial(sk, msg, tosend);\n471 sk_msg_apply_bytes(psock, tosend);\n472 *copied -= (tosend + delta);\n473 return -EACCES;\n[...]\n\nSo instead of sk_msg_free_partial we can do sk_msg_free here.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56633",
               url: "https://www.suse.com/security/cve/CVE-2024-56633",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235485 for CVE-2024-56633",
               url: "https://bugzilla.suse.com/1235485",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-56633",
      },
      {
         cve: "CVE-2024-56647",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56647",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: Fix icmp host relookup triggering ip_rt_bug\n\narp link failure may trigger ip_rt_bug while xfrm enabled, call trace is:\n\nWARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 ip_rt_bug+0x14/0x20\nModules linked in:\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc6-00077-g2e1b3cc9d7f7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996),\nBIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nRIP: 0010:ip_rt_bug+0x14/0x20\nCall Trace:\n <IRQ>\n ip_send_skb+0x14/0x40\n __icmp_send+0x42d/0x6a0\n ipv4_link_failure+0xe2/0x1d0\n arp_error_report+0x3c/0x50\n neigh_invalidate+0x8d/0x100\n neigh_timer_handler+0x2e1/0x330\n call_timer_fn+0x21/0x120\n __run_timer_base.part.0+0x1c9/0x270\n run_timer_softirq+0x4c/0x80\n handle_softirqs+0xac/0x280\n irq_exit_rcu+0x62/0x80\n sysvec_apic_timer_interrupt+0x77/0x90\n\nThe script below reproduces this scenario:\nip xfrm policy add src 0.0.0.0/0 dst 0.0.0.0/0 \\\n\tdir out priority 0 ptype main flag localok icmp\nip l a veth1 type veth\nip a a 192.168.141.111/24 dev veth0\nip l s veth0 up\nping 192.168.141.155 -c 1\n\nicmp_route_lookup() create input routes for locally generated packets\nwhile xfrm relookup ICMP traffic.Then it will set input route\n(dst->out = ip_rt_bug) to skb for DESTUNREACH.\n\nFor ICMP err triggered by locally generated packets, dst->dev of output\nroute is loopback. Generally, xfrm relookup verification is not required\non loopback interfaces (net.ipv4.conf.lo.disable_xfrm = 1).\n\nSkip icmp relookup for locally generated packets to fix it.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56647",
               url: "https://www.suse.com/security/cve/CVE-2024-56647",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235435 for CVE-2024-56647",
               url: "https://bugzilla.suse.com/1235435",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-56647",
      },
      {
         cve: "CVE-2024-56720",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-56720",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Several fixes to bpf_msg_pop_data\n\nSeveral fixes to bpf_msg_pop_data,\n1. In sk_msg_shift_left, we should put_page\n2. if (len == 0), return early is better\n3. pop the entire sk_msg (last == msg->sg.size) should be supported\n4. Fix for the value of variable \"a\"\n5. In sk_msg_shift_left, after shifting, i has already pointed to the next\nelement. Addtional sk_msg_iter_var_next may result in BUG.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-56720",
               url: "https://www.suse.com/security/cve/CVE-2024-56720",
            },
            {
               category: "external",
               summary: "SUSE Bug 1235592 for CVE-2024-56720",
               url: "https://bugzilla.suse.com/1235592",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-56720",
      },
      {
         cve: "CVE-2024-57889",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-57889",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking\n\nIf a device uses MCP23xxx IO expander to receive IRQs, the following\nbug can happen:\n\n  BUG: sleeping function called from invalid context\n    at kernel/locking/mutex.c:283\n  in_atomic(): 1, irqs_disabled(): 1, non_block: 0, ...\n  preempt_count: 1, expected: 0\n  ...\n  Call Trace:\n  ...\n  __might_resched+0x104/0x10e\n  __might_sleep+0x3e/0x62\n  mutex_lock+0x20/0x4c\n  regmap_lock_mutex+0x10/0x18\n  regmap_update_bits_base+0x2c/0x66\n  mcp23s08_irq_set_type+0x1ae/0x1d6\n  __irq_set_trigger+0x56/0x172\n  __setup_irq+0x1e6/0x646\n  request_threaded_irq+0xb6/0x160\n  ...\n\nWe observed the problem while experimenting with a touchscreen driver which\nused MCP23017 IO expander (I2C).\n\nThe regmap in the pinctrl-mcp23s08 driver uses a mutex for protection from\nconcurrent accesses, which is the default for regmaps without .fast_io,\n.disable_locking, etc.\n\nmcp23s08_irq_set_type() calls regmap_update_bits_base(), and the latter\nlocks the mutex.\n\nHowever, __setup_irq() locks desc->lock spinlock before calling these\nfunctions. As a result, the system tries to lock the mutex whole holding\nthe spinlock.\n\nIt seems, the internal regmap locks are not needed in this driver at all.\nmcp->lock seems to protect the regmap from concurrent accesses already,\nexcept, probably, in mcp_pinconf_get/set.\n\nmcp23s08_irq_set_type() and mcp23s08_irq_mask/unmask() are called under\nchip_bus_lock(), which calls mcp23s08_irq_bus_lock(). The latter takes\nmcp->lock and enables regmap caching, so that the potentially slow I2C\naccesses are deferred until chip_bus_unlock().\n\nThe accesses to the regmap from mcp23s08_probe_one() do not need additional\nlocking.\n\nIn all remaining places where the regmap is accessed, except\nmcp_pinconf_get/set(), the driver already takes mcp->lock.\n\nThis patch adds locking in mcp_pinconf_get/set() and disables internal\nlocking in the regmap config. Among other things, it fixes the sleeping\nin atomic context described above.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-57889",
               url: "https://www.suse.com/security/cve/CVE-2024-57889",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236573 for CVE-2024-57889",
               url: "https://bugzilla.suse.com/1236573",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-57889",
      },
      {
         cve: "CVE-2024-57948",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-57948",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: check local interfaces before deleting sdata list\n\nsyzkaller reported a corrupted list in ieee802154_if_remove. [1]\n\nRemove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4\nhardware device from the system.\n\nCPU0\t\t\t\t\tCPU1\n====\t\t\t\t\t====\ngenl_family_rcv_msg_doit\t\tieee802154_unregister_hw\nieee802154_del_iface\t\t\tieee802154_remove_interfaces\nrdev_del_virtual_intf_deprecated\tlist_del(&sdata->list)\nieee802154_if_remove\nlist_del_rcu\n\nThe net device has been unregistered, since the rcu grace period,\nunregistration must be run before ieee802154_if_remove.\n\nTo avoid this issue, add a check for local->interfaces before deleting\nsdata list.\n\n[1]\nkernel BUG at lib/list_debug.c:58!\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6277 Comm: syz-executor157 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nRIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 lib/list_debug.c:56\nCode: e8 a1 7e 00 07 90 0f 0b 48 c7 c7 e0 37 60 8c 4c 89 fe e8 8f 7e 00 07 90 0f 0b 48 c7 c7 40 38 60 8c 4c 89 fe e8 7d 7e 00 07 90 <0f> 0b 48 c7 c7 a0 38 60 8c 4c 89 fe e8 6b 7e 00 07 90 0f 0b 48 c7\nRSP: 0018:ffffc9000490f3d0 EFLAGS: 00010246\nRAX: 000000000000004e RBX: dead000000000122 RCX: d211eee56bb28d00\nRDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000\nRBP: ffff88805b278dd8 R08: ffffffff8174a12c R09: 1ffffffff2852f0d\nR10: dffffc0000000000 R11: fffffbfff2852f0e R12: dffffc0000000000\nR13: dffffc0000000000 R14: dead000000000100 R15: ffff88805b278cc0\nFS:  0000555572f94380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000056262e4a3000 CR3: 0000000078496000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n __list_del_entry_valid include/linux/list.h:124 [inline]\n __list_del_entry include/linux/list.h:215 [inline]\n list_del_rcu include/linux/rculist.h:157 [inline]\n ieee802154_if_remove+0x86/0x1e0 net/mac802154/iface.c:687\n rdev_del_virtual_intf_deprecated net/ieee802154/rdev-ops.h:24 [inline]\n ieee802154_del_iface+0x2c0/0x5c0 net/ieee802154/nl-phy.c:323\n genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline]\n genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]\n genl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551\n genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219\n netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901\n sock_sendmsg_nosec net/socket.c:729 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:744\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607\n ___sys_sendmsg net/socket.c:2661 [inline]\n __sys_sendmsg+0x292/0x380 net/socket.c:2690\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-57948",
               url: "https://www.suse.com/security/cve/CVE-2024-57948",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236677 for CVE-2024-57948",
               url: "https://bugzilla.suse.com/1236677",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2024-57948",
      },
      {
         cve: "CVE-2024-57994",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-57994",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()\n\nJakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page()\nto increase test coverage.\n\nsyzbot found a splat caused by hard irq blocking in\nptr_ring_resize_multiple() [1]\n\nAs current users of ptr_ring_resize_multiple() do not require\nhard irqs being masked, replace it to only block BH.\n\nRename helpers to better reflect they are safe against BH only.\n\n- ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()\n- skb_array_resize_multiple() to skb_array_resize_multiple_bh()\n\n[1]\n\nWARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline]\nWARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780\nModules linked in:\nCPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nRIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline]\nRIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780\nCode: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85\nRSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083\nRAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000\nRDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843\nRBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d\nR10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040\nR13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff\nFS:  00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n tun_ptr_free drivers/net/tun.c:617 [inline]\n __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline]\n ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline]\n tun_queue_resize drivers/net/tun.c:3694 [inline]\n tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n call_netdevice_notifiers_extack net/core/dev.c:2032 [inline]\n call_netdevice_notifiers net/core/dev.c:2046 [inline]\n dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024\n do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923\n rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201\n rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-57994",
               url: "https://www.suse.com/security/cve/CVE-2024-57994",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237901 for CVE-2024-57994",
               url: "https://bugzilla.suse.com/1237901",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-57994",
      },
      {
         cve: "CVE-2025-21636",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21636",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy\n\nAs mentioned in a previous commit of this series, using the 'net'\nstructure via 'current' is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader's/writer's netns vs only\n  from the opener's netns.\n\n- current->nsproxy can be NULL in some cases, resulting in an 'Oops'\n  (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n  syzbot [1] using acct(2).\n\nThe 'net' structure can be obtained from the table->data using\ncontainer_of().\n\nNote that table->data could also be used directly, as this is the only\nmember needed from the 'net' structure, but that would increase the size\nof this fix, to use '*data' everywhere 'net->sctp.probe_interval' is\nused.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21636",
               url: "https://www.suse.com/security/cve/CVE-2025-21636",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236113 for CVE-2025-21636",
               url: "https://bugzilla.suse.com/1236113",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21636",
      },
      {
         cve: "CVE-2025-21637",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21637",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: sysctl: udp_port: avoid using current->nsproxy\n\nAs mentioned in a previous commit of this series, using the 'net'\nstructure via 'current' is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader's/writer's netns vs only\n  from the opener's netns.\n\n- current->nsproxy can be NULL in some cases, resulting in an 'Oops'\n  (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n  syzbot [1] using acct(2).\n\nThe 'net' structure can be obtained from the table->data using\ncontainer_of().\n\nNote that table->data could also be used directly, but that would\nincrease the size of this fix, while 'sctp.ctl_sock' still needs to be\nretrieved from 'net' structure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21637",
               url: "https://www.suse.com/security/cve/CVE-2025-21637",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236114 for CVE-2025-21637",
               url: "https://bugzilla.suse.com/1236114",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21637",
      },
      {
         cve: "CVE-2025-21638",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21638",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: sysctl: auth_enable: avoid using current->nsproxy\n\nAs mentioned in a previous commit of this series, using the 'net'\nstructure via 'current' is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader's/writer's netns vs only\n  from the opener's netns.\n\n- current->nsproxy can be NULL in some cases, resulting in an 'Oops'\n  (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n  syzbot [1] using acct(2).\n\nThe 'net' structure can be obtained from the table->data using\ncontainer_of().\n\nNote that table->data could also be used directly, but that would\nincrease the size of this fix, while 'sctp.ctl_sock' still needs to be\nretrieved from 'net' structure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21638",
               url: "https://www.suse.com/security/cve/CVE-2025-21638",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236115 for CVE-2025-21638",
               url: "https://bugzilla.suse.com/1236115",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21638",
      },
      {
         cve: "CVE-2025-21639",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21639",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: sysctl: rto_min/max: avoid using current->nsproxy\n\nAs mentioned in a previous commit of this series, using the 'net'\nstructure via 'current' is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader's/writer's netns vs only\n  from the opener's netns.\n\n- current->nsproxy can be NULL in some cases, resulting in an 'Oops'\n  (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n  syzbot [1] using acct(2).\n\nThe 'net' structure can be obtained from the table->data using\ncontainer_of().\n\nNote that table->data could also be used directly, as this is the only\nmember needed from the 'net' structure, but that would increase the size\nof this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21639",
               url: "https://www.suse.com/security/cve/CVE-2025-21639",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236122 for CVE-2025-21639",
               url: "https://bugzilla.suse.com/1236122",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21639",
      },
      {
         cve: "CVE-2025-21640",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21640",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy\n\nAs mentioned in a previous commit of this series, using the 'net'\nstructure via 'current' is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader's/writer's netns vs only\n  from the opener's netns.\n\n- current->nsproxy can be NULL in some cases, resulting in an 'Oops'\n  (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n  syzbot [1] using acct(2).\n\nThe 'net' structure can be obtained from the table->data using\ncontainer_of().\n\nNote that table->data could also be used directly, as this is the only\nmember needed from the 'net' structure, but that would increase the size\nof this fix, to use '*data' everywhere 'net->sctp.sctp_hmac_alg' is\nused.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21640",
               url: "https://www.suse.com/security/cve/CVE-2025-21640",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236123 for CVE-2025-21640",
               url: "https://bugzilla.suse.com/1236123",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21640",
      },
      {
         cve: "CVE-2025-21647",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21647",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsched: sch_cake: add bounds checks to host bulk flow fairness counts\n\nEven though we fixed a logic error in the commit cited below, syzbot\nstill managed to trigger an underflow of the per-host bulk flow\ncounters, leading to an out of bounds memory access.\n\nTo avoid any such logic errors causing out of bounds memory accesses,\nthis commit factors out all accesses to the per-host bulk flow counters\nto a series of helpers that perform bounds-checking before any\nincrements and decrements. This also has the benefit of improving\nreadability by moving the conditional checks for the flow mode into\nthese helpers, instead of having them spread out throughout the\ncode (which was the cause of the original logic error).\n\nAs part of this change, the flow quantum calculation is consolidated\ninto a helper function, which means that the dithering applied to the\nost load scaling is now applied both in the DRR rotation and when a\nsparse flow's quantum is first initiated. The only user-visible effect\nof this is that the maximum packet size that can be sent while a flow\nstays sparse will now vary with +/- one byte in some cases. This should\nnot make a noticeable difference in practice, and thus it's not worth\ncomplicating the code to preserve the old behaviour.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21647",
               url: "https://www.suse.com/security/cve/CVE-2025-21647",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236133 for CVE-2025-21647",
               url: "https://bugzilla.suse.com/1236133",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236134 for CVE-2025-21647",
               url: "https://bugzilla.suse.com/1236134",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2025-21647",
      },
      {
         cve: "CVE-2025-21665",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21665",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nfilemap: avoid truncating 64-bit offset to 32 bits\n\nOn 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a\n64-bit value to 32 bits, leading to a possible infinite loop when writing\nto an xfs filesystem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21665",
               url: "https://www.suse.com/security/cve/CVE-2025-21665",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236684 for CVE-2025-21665",
               url: "https://bugzilla.suse.com/1236684",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21665",
      },
      {
         cve: "CVE-2025-21667",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21667",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\niomap: avoid avoid truncating 64-bit offset to 32 bits\n\non 32-bit kernels, iomap_write_delalloc_scan() was inadvertently using a\n32-bit position due to folio_next_index() returning an unsigned long.\nThis could lead to an infinite loop when writing to an xfs filesystem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21667",
               url: "https://www.suse.com/security/cve/CVE-2025-21667",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236681 for CVE-2025-21667",
               url: "https://bugzilla.suse.com/1236681",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21667",
      },
      {
         cve: "CVE-2025-21668",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21668",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx8mp-blk-ctrl: add missing loop break condition\n\nCurrently imx8mp_blk_ctrl_remove() will continue the for loop\nuntil an out-of-bounds exception occurs.\n\npstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : dev_pm_domain_detach+0x8/0x48\nlr : imx8mp_blk_ctrl_shutdown+0x58/0x90\nsp : ffffffc084f8bbf0\nx29: ffffffc084f8bbf0 x28: ffffff80daf32ac0 x27: 0000000000000000\nx26: ffffffc081658d78 x25: 0000000000000001 x24: ffffffc08201b028\nx23: ffffff80d0db9490 x22: ffffffc082340a78 x21: 00000000000005b0\nx20: ffffff80d19bc180 x19: 000000000000000a x18: ffffffffffffffff\nx17: ffffffc080a39e08 x16: ffffffc080a39c98 x15: 4f435f464f006c72\nx14: 0000000000000004 x13: ffffff80d0172110 x12: 0000000000000000\nx11: ffffff80d0537740 x10: ffffff80d05376c0 x9 : ffffffc0808ed2d8\nx8 : ffffffc084f8bab0 x7 : 0000000000000000 x6 : 0000000000000000\nx5 : ffffff80d19b9420 x4 : fffffffe03466e60 x3 : 0000000080800077\nx2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000\nCall trace:\n dev_pm_domain_detach+0x8/0x48\n platform_shutdown+0x2c/0x48\n device_shutdown+0x158/0x268\n kernel_restart_prepare+0x40/0x58\n kernel_kexec+0x58/0xe8\n __do_sys_reboot+0x198/0x258\n __arm64_sys_reboot+0x2c/0x40\n invoke_syscall+0x5c/0x138\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x38/0xc8\n el0t_64_sync_handler+0x120/0x130\n el0t_64_sync+0x190/0x198\nCode: 8128c2d0 ffffffc0 aa1e03e9 d503201f",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21668",
               url: "https://www.suse.com/security/cve/CVE-2025-21668",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236682 for CVE-2025-21668",
               url: "https://bugzilla.suse.com/1236682",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21668",
      },
      {
         cve: "CVE-2025-21673",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21673",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix double free of TCP_Server_Info::hostname\n\nWhen shutting down the server in cifs_put_tcp_session(), cifsd thread\nmight be reconnecting to multiple DFS targets before it realizes it\nshould exit the loop, so @server->hostname can't be freed as long as\ncifsd thread isn't done.  Otherwise the following can happen:\n\n  RIP: 0010:__slab_free+0x223/0x3c0\n  Code: 5e 41 5f c3 cc cc cc cc 4c 89 de 4c 89 cf 44 89 44 24 08 4c 89\n  1c 24 e8 fb cf 8e 00 44 8b 44 24 08 4c 8b 1c 24 e9 5f fe ff ff <0f>\n  0b 41 f7 45 08 00 0d 21 00 0f 85 2d ff ff ff e9 1f ff ff ff 80\n  RSP: 0018:ffffb26180dbfd08 EFLAGS: 00010246\n  RAX: ffff8ea34728e510 RBX: ffff8ea34728e500 RCX: 0000000000800068\n  RDX: 0000000000800068 RSI: 0000000000000000 RDI: ffff8ea340042400\n  RBP: ffffe112041ca380 R08: 0000000000000001 R09: 0000000000000000\n  R10: 6170732e31303000 R11: 70726f632e786563 R12: ffff8ea34728e500\n  R13: ffff8ea340042400 R14: ffff8ea34728e500 R15: 0000000000800068\n  FS: 0000000000000000(0000) GS:ffff8ea66fd80000(0000)\n  000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00007ffc25376080 CR3: 000000012a2ba001 CR4:\n  PKRU: 55555554\n  Call Trace:\n   <TASK>\n   ? show_trace_log_lvl+0x1c4/0x2df\n   ? show_trace_log_lvl+0x1c4/0x2df\n   ? __reconnect_target_unlocked+0x3e/0x160 [cifs]\n   ? __die_body.cold+0x8/0xd\n   ? die+0x2b/0x50\n   ? do_trap+0xce/0x120\n   ? __slab_free+0x223/0x3c0\n   ? do_error_trap+0x65/0x80\n   ? __slab_free+0x223/0x3c0\n   ? exc_invalid_op+0x4e/0x70\n   ? __slab_free+0x223/0x3c0\n   ? asm_exc_invalid_op+0x16/0x20\n   ? __slab_free+0x223/0x3c0\n   ? extract_hostname+0x5c/0xa0 [cifs]\n   ? extract_hostname+0x5c/0xa0 [cifs]\n   ? __kmalloc+0x4b/0x140\n   __reconnect_target_unlocked+0x3e/0x160 [cifs]\n   reconnect_dfs_server+0x145/0x430 [cifs]\n   cifs_handle_standard+0x1ad/0x1d0 [cifs]\n   cifs_demultiplex_thread+0x592/0x730 [cifs]\n   ? __pfx_cifs_demultiplex_thread+0x10/0x10 [cifs]\n   kthread+0xdd/0x100\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork+0x29/0x50\n   </TASK>",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21673",
               url: "https://www.suse.com/security/cve/CVE-2025-21673",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236689 for CVE-2025-21673",
               url: "https://bugzilla.suse.com/1236689",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21673",
      },
      {
         cve: "CVE-2025-21680",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21680",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\npktgen: Avoid out-of-bounds access in get_imix_entries\n\nPassing a sufficient amount of imix entries leads to invalid access to the\npkt_dev->imix_entries array because of the incorrect boundary check.\n\nUBSAN: array-index-out-of-bounds in net/core/pktgen.c:874:24\nindex 20 is out of range for type 'imix_pkt [20]'\nCPU: 2 PID: 1210 Comm: bash Not tainted 6.10.0-rc1 #121\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996)\nCall Trace:\n<TASK>\ndump_stack_lvl lib/dump_stack.c:117\n__ubsan_handle_out_of_bounds lib/ubsan.c:429\nget_imix_entries net/core/pktgen.c:874\npktgen_if_write net/core/pktgen.c:1063\npde_write fs/proc/inode.c:334\nproc_reg_write fs/proc/inode.c:346\nvfs_write fs/read_write.c:593\nksys_write fs/read_write.c:644\ndo_syscall_64 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe arch/x86/entry/entry_64.S:130\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\n[ fp: allow to fill the array completely; minor changelog cleanup ]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21680",
               url: "https://www.suse.com/security/cve/CVE-2025-21680",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236700 for CVE-2025-21680",
               url: "https://bugzilla.suse.com/1236700",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236701 for CVE-2025-21680",
               url: "https://bugzilla.suse.com/1236701",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2025-21680",
      },
      {
         cve: "CVE-2025-21681",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21681",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: fix lockup on tx to unregistering netdev with carrier\n\nCommit in a fixes tag attempted to fix the issue in the following\nsequence of calls:\n\n    do_output\n    -> ovs_vport_send\n       -> dev_queue_xmit\n          -> __dev_queue_xmit\n             -> netdev_core_pick_tx\n                -> skb_tx_hash\n\nWhen device is unregistering, the 'dev->real_num_tx_queues' goes to\nzero and the 'while (unlikely(hash >= qcount))' loop inside the\n'skb_tx_hash' becomes infinite, locking up the core forever.\n\nBut unfortunately, checking just the carrier status is not enough to\nfix the issue, because some devices may still be in unregistering\nstate while reporting carrier status OK.\n\nOne example of such device is a net/dummy.  It sets carrier ON\non start, but it doesn't implement .ndo_stop to set the carrier off.\nAnd it makes sense, because dummy doesn't really have a carrier.\nTherefore, while this device is unregistering, it's still easy to hit\nthe infinite loop in the skb_tx_hash() from the OVS datapath.  There\nmight be other drivers that do the same, but dummy by itself is\nimportant for the OVS ecosystem, because it is frequently used as a\npacket sink for tcpdump while debugging OVS deployments.  And when the\nissue is hit, the only way to recover is to reboot.\n\nFix that by also checking if the device is running.  The running\nstate is handled by the net core during unregistering, so it covers\nunregistering case better, and we don't really need to send packets\nto devices that are not running anyway.\n\nWhile only checking the running state might be enough, the carrier\ncheck is preserved.  The running and the carrier states seem disjoined\nthroughout the code and different drivers.  And other core functions\nlike __dev_direct_xmit() check both before attempting to transmit\na packet.  So, it seems safer to check both flags in OVS as well.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21681",
               url: "https://www.suse.com/security/cve/CVE-2025-21681",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236702 for CVE-2025-21681",
               url: "https://bugzilla.suse.com/1236702",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21681",
      },
      {
         cve: "CVE-2025-21684",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21684",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: xilinx: Convert gpio_lock to raw spinlock\n\nirq_chip functions may be called in raw spinlock context. Therefore, we\nmust also use a raw spinlock for our own internal locking.\n\nThis fixes the following lockdep splat:\n\n[    5.349336] =============================\n[    5.353349] [ BUG: Invalid wait context ]\n[    5.357361] 6.13.0-rc5+ #69 Tainted: G        W\n[    5.363031] -----------------------------\n[    5.367045] kworker/u17:1/44 is trying to lock:\n[    5.371587] ffffff88018b02c0 (&chip->gpio_lock){....}-{3:3}, at: xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8))\n[    5.380079] other info that might help us debug this:\n[    5.385138] context-{5:5}\n[    5.387762] 5 locks held by kworker/u17:1/44:\n[    5.392123] #0: ffffff8800014958 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3204)\n[    5.402260] #1: ffffffc082fcbdd8 (deferred_probe_work){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3205)\n[    5.411528] #2: ffffff880172c900 (&dev->mutex){....}-{4:4}, at: __device_attach (drivers/base/dd.c:1006)\n[    5.419929] #3: ffffff88039c8268 (request_class#2){+.+.}-{4:4}, at: __setup_irq (kernel/irq/internals.h:156 kernel/irq/manage.c:1596)\n[    5.428331] #4: ffffff88039c80c8 (lock_class#2){....}-{2:2}, at: __setup_irq (kernel/irq/manage.c:1614)\n[    5.436472] stack backtrace:\n[    5.439359] CPU: 2 UID: 0 PID: 44 Comm: kworker/u17:1 Tainted: G        W          6.13.0-rc5+ #69\n[    5.448690] Tainted: [W]=WARN\n[    5.451656] Hardware name: xlnx,zynqmp (DT)\n[    5.455845] Workqueue: events_unbound deferred_probe_work_func\n[    5.461699] Call trace:\n[    5.464147] show_stack+0x18/0x24 C\n[    5.467821] dump_stack_lvl (lib/dump_stack.c:123)\n[    5.471501] dump_stack (lib/dump_stack.c:130)\n[    5.474824] __lock_acquire (kernel/locking/lockdep.c:4828 kernel/locking/lockdep.c:4898 kernel/locking/lockdep.c:5176)\n[    5.478758] lock_acquire (arch/arm64/include/asm/percpu.h:40 kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5851 kernel/locking/lockdep.c:5814)\n[    5.482429] _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:111 kernel/locking/spinlock.c:162)\n[    5.486797] xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8))\n[    5.490737] irq_enable (kernel/irq/internals.h:236 kernel/irq/chip.c:170 kernel/irq/chip.c:439 kernel/irq/chip.c:432 kernel/irq/chip.c:345)\n[    5.494060] __irq_startup (kernel/irq/internals.h:241 kernel/irq/chip.c:180 kernel/irq/chip.c:250)\n[    5.497645] irq_startup (kernel/irq/chip.c:270)\n[    5.501143] __setup_irq (kernel/irq/manage.c:1807)\n[    5.504728] request_threaded_irq (kernel/irq/manage.c:2208)",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21684",
               url: "https://www.suse.com/security/cve/CVE-2025-21684",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236952 for CVE-2025-21684",
               url: "https://bugzilla.suse.com/1236952",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21684",
      },
      {
         cve: "CVE-2025-21687",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21687",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/platform: check the bounds of read/write syscalls\n\ncount and offset are passed from user space and not checked, only\noffset is capped to 40 bits, which can be used to read/write out of\nbounds of the device.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21687",
               url: "https://www.suse.com/security/cve/CVE-2025-21687",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237045 for CVE-2025-21687",
               url: "https://bugzilla.suse.com/1237045",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237046 for CVE-2025-21687",
               url: "https://bugzilla.suse.com/1237046",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2025-21687",
      },
      {
         cve: "CVE-2025-21688",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21688",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Assign job pointer to NULL before signaling the fence\n\nIn commit e4b5ccd392b9 (\"drm/v3d: Ensure job pointer is set to NULL\nafter job completion\"), we introduced a change to assign the job pointer\nto NULL after completing a job, indicating job completion.\n\nHowever, this approach created a race condition between the DRM\nscheduler workqueue and the IRQ execution thread. As soon as the fence is\nsignaled in the IRQ execution thread, a new job starts to be executed.\nThis results in a race condition where the IRQ execution thread sets the\njob pointer to NULL simultaneously as the `run_job()` function assigns\na new job to the pointer.\n\nThis race condition can lead to a NULL pointer dereference if the IRQ\nexecution thread sets the job pointer to NULL after `run_job()` assigns\nit to the new job. When the new job completes and the GPU emits an\ninterrupt, `v3d_irq()` is triggered, potentially causing a crash.\n\n[  466.310099] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000c0\n[  466.318928] Mem abort info:\n[  466.321723]   ESR = 0x0000000096000005\n[  466.325479]   EC = 0x25: DABT (current EL), IL = 32 bits\n[  466.330807]   SET = 0, FnV = 0\n[  466.333864]   EA = 0, S1PTW = 0\n[  466.337010]   FSC = 0x05: level 1 translation fault\n[  466.341900] Data abort info:\n[  466.344783]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000\n[  466.350285]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[  466.355350]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[  466.360677] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000089772000\n[  466.367140] [00000000000000c0] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000\n[  466.375875] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP\n[  466.382163] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device algif_hash algif_skcipher af_alg bnep binfmt_misc vc4 snd_soc_hdmi_codec drm_display_helper cec brcmfmac_wcc spidev rpivid_hevc(C) drm_client_lib brcmfmac hci_uart drm_dma_helper pisp_be btbcm brcmutil snd_soc_core aes_ce_blk v4l2_mem2mem bluetooth aes_ce_cipher snd_compress videobuf2_dma_contig ghash_ce cfg80211 gf128mul snd_pcm_dmaengine videobuf2_memops ecdh_generic sha2_ce ecc videobuf2_v4l2 snd_pcm v3d sha256_arm64 rfkill videodev snd_timer sha1_ce libaes gpu_sched snd videobuf2_common sha1_generic drm_shmem_helper mc rp1_pio drm_kms_helper raspberrypi_hwmon spi_bcm2835 gpio_keys i2c_brcmstb rp1 raspberrypi_gpiomem rp1_mailbox rp1_adc nvmem_rmem uio_pdrv_genirq uio i2c_dev drm ledtrig_pattern drm_panel_orientation_quirks backlight fuse dm_mod ip_tables x_tables ipv6\n[  466.458429] CPU: 0 UID: 1000 PID: 2008 Comm: chromium Tainted: G         C         6.13.0-v8+ #18\n[  466.467336] Tainted: [C]=CRAP\n[  466.470306] Hardware name: Raspberry Pi 5 Model B Rev 1.0 (DT)\n[  466.476157] pstate: 404000c9 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[  466.483143] pc : v3d_irq+0x118/0x2e0 [v3d]\n[  466.487258] lr : __handle_irq_event_percpu+0x60/0x228\n[  466.492327] sp : ffffffc080003ea0\n[  466.495646] x29: ffffffc080003ea0 x28: ffffff80c0c94200 x27: 0000000000000000\n[  466.502807] x26: ffffffd08dd81d7b x25: ffffff80c0c94200 x24: ffffff8003bdc200\n[  466.509969] x23: 0000000000000001 x22: 00000000000000a7 x21: 0000000000000000\n[  466.517130] x20: ffffff8041bb0000 x19: 0000000000000001 x18: 0000000000000000\n[  466.524291] x17: ffffffafadfb0000 x16: ffffffc080000000 x15: 0000000000000000\n[  466.531452] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n[  466.538613] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffffd08c527eb0\n[  466.545777] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000\n[  466.552941] x5 : ffffffd08c4100d0 x4 : ffffffafadfb0000 x3 : ffffffc080003f70\n[  466.560102] x2 : ffffffc0829e8058 x1 : 0000000000000001 x0 : 0000000000000000\n[  466.567263] Call trace:\n[  466.569711]  v3d_irq+0x118/0x2e0 [v3d] (P)\n[  466.\n---truncated---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21688",
               url: "https://www.suse.com/security/cve/CVE-2025-21688",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237007 for CVE-2025-21688",
               url: "https://bugzilla.suse.com/1237007",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21688",
      },
      {
         cve: "CVE-2025-21689",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21689",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()\n\nThis patch addresses a null-ptr-deref in qt2_process_read_urb() due to\nan incorrect bounds check in the following:\n\n       if (newport > serial->num_ports) {\n               dev_err(&port->dev,\n                       \"%s - port change to invalid port: %i\\n\",\n                       __func__, newport);\n               break;\n       }\n\nThe condition doesn't account for the valid range of the serial->port\nbuffer, which is from 0 to serial->num_ports - 1. When newport is equal\nto serial->num_ports, the assignment of \"port\" in the\nfollowing code is out-of-bounds and NULL:\n\n       serial_priv->current_port = newport;\n       port = serial->port[serial_priv->current_port];\n\nThe fix checks if newport is greater than or equal to serial->num_ports\nindicating it is out-of-bounds.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21689",
               url: "https://www.suse.com/security/cve/CVE-2025-21689",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237017 for CVE-2025-21689",
               url: "https://bugzilla.suse.com/1237017",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21689",
      },
      {
         cve: "CVE-2025-21690",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21690",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: storvsc: Ratelimit warning logs to prevent VM denial of service\n\nIf there's a persistent error in the hypervisor, the SCSI warning for\nfailed I/O can flood the kernel log and max out CPU utilization,\npreventing troubleshooting from the VM side. Ratelimit the warning so\nit doesn't DoS the VM.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21690",
               url: "https://www.suse.com/security/cve/CVE-2025-21690",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237025 for CVE-2025-21690",
               url: "https://bugzilla.suse.com/1237025",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21690",
      },
      {
         cve: "CVE-2025-21692",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21692",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ets qdisc OOB Indexing\n\nHaowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can\nindex an Out-Of-Bound class in ets_class_from_arg() when passed clid of\n0. The overflow may cause local privilege escalation.\n\n [   18.852298] ------------[ cut here ]------------\n [   18.853271] UBSAN: array-index-out-of-bounds in net/sched/sch_ets.c:93:20\n [   18.853743] index 18446744073709551615 is out of range for type 'ets_class [16]'\n [   18.854254] CPU: 0 UID: 0 PID: 1275 Comm: poc Not tainted 6.12.6-dirty #17\n [   18.854821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n [   18.856532] Call Trace:\n [   18.857441]  <TASK>\n [   18.858227]  dump_stack_lvl+0xc2/0xf0\n [   18.859607]  dump_stack+0x10/0x20\n [   18.860908]  __ubsan_handle_out_of_bounds+0xa7/0xf0\n [   18.864022]  ets_class_change+0x3d6/0x3f0\n [   18.864322]  tc_ctl_tclass+0x251/0x910\n [   18.864587]  ? lock_acquire+0x5e/0x140\n [   18.865113]  ? __mutex_lock+0x9c/0xe70\n [   18.866009]  ? __mutex_lock+0xa34/0xe70\n [   18.866401]  rtnetlink_rcv_msg+0x170/0x6f0\n [   18.866806]  ? __lock_acquire+0x578/0xc10\n [   18.867184]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10\n [   18.867503]  netlink_rcv_skb+0x59/0x110\n [   18.867776]  rtnetlink_rcv+0x15/0x30\n [   18.868159]  netlink_unicast+0x1c3/0x2b0\n [   18.868440]  netlink_sendmsg+0x239/0x4b0\n [   18.868721]  ____sys_sendmsg+0x3e2/0x410\n [   18.869012]  ___sys_sendmsg+0x88/0xe0\n [   18.869276]  ? rseq_ip_fixup+0x198/0x260\n [   18.869563]  ? rseq_update_cpu_node_id+0x10a/0x190\n [   18.869900]  ? trace_hardirqs_off+0x5a/0xd0\n [   18.870196]  ? syscall_exit_to_user_mode+0xcc/0x220\n [   18.870547]  ? do_syscall_64+0x93/0x150\n [   18.870821]  ? __memcg_slab_free_hook+0x69/0x290\n [   18.871157]  __sys_sendmsg+0x69/0xd0\n [   18.871416]  __x64_sys_sendmsg+0x1d/0x30\n [   18.871699]  x64_sys_call+0x9e2/0x2670\n [   18.871979]  do_syscall_64+0x87/0x150\n [   18.873280]  ? do_syscall_64+0x93/0x150\n [   18.874742]  ? lock_release+0x7b/0x160\n [   18.876157]  ? do_user_addr_fault+0x5ce/0x8f0\n [   18.877833]  ? irqentry_exit_to_user_mode+0xc2/0x210\n [   18.879608]  ? irqentry_exit+0x77/0xb0\n [   18.879808]  ? clear_bhb_loop+0x15/0x70\n [   18.880023]  ? clear_bhb_loop+0x15/0x70\n [   18.880223]  ? clear_bhb_loop+0x15/0x70\n [   18.880426]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n [   18.880683] RIP: 0033:0x44a957\n [   18.880851] Code: ff ff e8 fc 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 8974 24 10\n [   18.881766] RSP: 002b:00007ffcdd00fad8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\n [   18.882149] RAX: ffffffffffffffda RBX: 00007ffcdd010db8 RCX: 000000000044a957\n [   18.882507] RDX: 0000000000000000 RSI: 00007ffcdd00fb70 RDI: 0000000000000003\n [   18.885037] RBP: 00007ffcdd010bc0 R08: 000000000703c770 R09: 000000000703c7c0\n [   18.887203] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001\n [   18.888026] R13: 00007ffcdd010da8 R14: 00000000004ca7d0 R15: 0000000000000001\n [   18.888395]  </TASK>\n [   18.888610] ---[ end trace ]---",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21692",
               url: "https://www.suse.com/security/cve/CVE-2025-21692",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237028 for CVE-2025-21692",
               url: "https://bugzilla.suse.com/1237028",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237048 for CVE-2025-21692",
               url: "https://bugzilla.suse.com/1237048",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "important",
            },
         ],
         title: "CVE-2025-21692",
      },
      {
         cve: "CVE-2025-21697",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21697",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Ensure job pointer is set to NULL after job completion\n\nAfter a job completes, the corresponding pointer in the device must\nbe set to NULL. Failing to do so triggers a warning when unloading\nthe driver, as it appears the job is still active. To prevent this,\nassign the job pointer to NULL after completing the job, indicating\nthe job has finished.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21697",
               url: "https://www.suse.com/security/cve/CVE-2025-21697",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237132 for CVE-2025-21697",
               url: "https://bugzilla.suse.com/1237132",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "low",
            },
         ],
         title: "CVE-2025-21697",
      },
      {
         cve: "CVE-2025-21699",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21699",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Truncate address space when flipping GFS2_DIF_JDATA flag\n\nTruncate an inode's address space when flipping the GFS2_DIF_JDATA flag:\ndepending on that flag, the pages in the address space will either use\nbuffer heads or iomap_folio_state structs, and we cannot mix the two.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21699",
               url: "https://www.suse.com/security/cve/CVE-2025-21699",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237139 for CVE-2025-21699",
               url: "https://bugzilla.suse.com/1237139",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21699",
      },
      {
         cve: "CVE-2025-21700",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21700",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: Disallow replacing of child qdisc from one parent to another\n\nLion Ackermann was able to create a UAF which can be abused for privilege\nescalation with the following script\n\nStep 1. create root qdisc\ntc qdisc add dev lo root handle 1:0 drr\n\nstep2. a class for packet aggregation do demonstrate uaf\ntc class add dev lo classid 1:1 drr\n\nstep3. a class for nesting\ntc class add dev lo classid 1:2 drr\n\nstep4. a class to graft qdisc to\ntc class add dev lo classid 1:3 drr\n\nstep5.\ntc qdisc add dev lo parent 1:1 handle 2:0 plug limit 1024\n\nstep6.\ntc qdisc add dev lo parent 1:2 handle 3:0 drr\n\nstep7.\ntc class add dev lo classid 3:1 drr\n\nstep 8.\ntc qdisc add dev lo parent 3:1 handle 4:0 pfifo\n\nstep 9. Display the class/qdisc layout\n\ntc class ls dev lo\n class drr 1:1 root leaf 2: quantum 64Kb\n class drr 1:2 root leaf 3: quantum 64Kb\n class drr 3:1 root leaf 4: quantum 64Kb\n\ntc qdisc ls\n qdisc drr 1: dev lo root refcnt 2\n qdisc plug 2: dev lo parent 1:1\n qdisc pfifo 4: dev lo parent 3:1 limit 1000p\n qdisc drr 3: dev lo parent 1:2\n\nstep10. trigger the bug <=== prevented by this patch\ntc qdisc replace dev lo parent 1:3 handle 4:0\n\nstep 11. Redisplay again the qdiscs/classes\n\ntc class ls dev lo\n class drr 1:1 root leaf 2: quantum 64Kb\n class drr 1:2 root leaf 3: quantum 64Kb\n class drr 1:3 root leaf 4: quantum 64Kb\n class drr 3:1 root leaf 4: quantum 64Kb\n\ntc qdisc ls\n qdisc drr 1: dev lo root refcnt 2\n qdisc plug 2: dev lo parent 1:1\n qdisc pfifo 4: dev lo parent 3:1 refcnt 2 limit 1000p\n qdisc drr 3: dev lo parent 1:2\n\nObserve that a) parent for 4:0 does not change despite the replace request.\nThere can only be one parent.  b) refcount has gone up by two for 4:0 and\nc) both class 1:3 and 3:1 are pointing to it.\n\nStep 12.  send one packet to plug\necho \"\" | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888,priority=$((0x10001))\nstep13.  send one packet to the grafted fifo\necho \"\" | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888,priority=$((0x10003))\n\nstep14. lets trigger the uaf\ntc class delete dev lo classid 1:3\ntc class delete dev lo classid 1:1\n\nThe semantics of \"replace\" is for a del/add _on the same node_ and not\na delete from one node(3:1) and add to another node (1:3) as in step10.\nWhile we could \"fix\" with a more complex approach there could be\nconsequences to expectations so the patch takes the preventive approach of\n\"disallow such config\".\n\nJoint work with Lion Ackermann <nnamrec@gmail.com>",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21700",
               url: "https://www.suse.com/security/cve/CVE-2025-21700",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237159 for CVE-2025-21700",
               url: "https://bugzilla.suse.com/1237159",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21700",
      },
      {
         cve: "CVE-2025-21705",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21705",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: handle fastopen disconnect correctly\n\nSyzbot was able to trigger a data stream corruption:\n\n  WARNING: CPU: 0 PID: 9846 at net/mptcp/protocol.c:1024 __mptcp_clean_una+0xddb/0xff0 net/mptcp/protocol.c:1024\n  Modules linked in:\n  CPU: 0 UID: 0 PID: 9846 Comm: syz-executor351 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0\n  Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n  RIP: 0010:__mptcp_clean_una+0xddb/0xff0 net/mptcp/protocol.c:1024\n  Code: fa ff ff 48 8b 4c 24 18 80 e1 07 fe c1 38 c1 0f 8c 8e fa ff ff 48 8b 7c 24 18 e8 e0 db 54 f6 e9 7f fa ff ff e8 e6 80 ee f5 90 <0f> 0b 90 4c 8b 6c 24 40 4d 89 f4 e9 04 f5 ff ff 44 89 f1 80 e1 07\n  RSP: 0018:ffffc9000c0cf400 EFLAGS: 00010293\n  RAX: ffffffff8bb0dd5a RBX: ffff888033f5d230 RCX: ffff888059ce8000\n  RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n  RBP: ffffc9000c0cf518 R08: ffffffff8bb0d1dd R09: 1ffff110170c8928\n  R10: dffffc0000000000 R11: ffffed10170c8929 R12: 0000000000000000\n  R13: ffff888033f5d220 R14: dffffc0000000000 R15: ffff8880592b8000\n  FS:  00007f6e866496c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00007f6e86f491a0 CR3: 00000000310e6000 CR4: 00000000003526f0\n  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n  Call Trace:\n   <TASK>\n   __mptcp_clean_una_wakeup+0x7f/0x2d0 net/mptcp/protocol.c:1074\n   mptcp_release_cb+0x7cb/0xb30 net/mptcp/protocol.c:3493\n   release_sock+0x1aa/0x1f0 net/core/sock.c:3640\n   inet_wait_for_connect net/ipv4/af_inet.c:609 [inline]\n   __inet_stream_connect+0x8bd/0xf30 net/ipv4/af_inet.c:703\n   mptcp_sendmsg_fastopen+0x2a2/0x530 net/mptcp/protocol.c:1755\n   mptcp_sendmsg+0x1884/0x1b10 net/mptcp/protocol.c:1830\n   sock_sendmsg_nosec net/socket.c:711 [inline]\n   __sock_sendmsg+0x1a6/0x270 net/socket.c:726\n   ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n   ___sys_sendmsg net/socket.c:2637 [inline]\n   __sys_sendmsg+0x269/0x350 net/socket.c:2669\n   do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n   do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n  RIP: 0033:0x7f6e86ebfe69\n  Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\n  RSP: 002b:00007f6e86649168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\n  RAX: ffffffffffffffda RBX: 00007f6e86f491b8 RCX: 00007f6e86ebfe69\n  RDX: 0000000030004001 RSI: 0000000020000080 RDI: 0000000000000003\n  RBP: 00007f6e86f491b0 R08: 00007f6e866496c0 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e86f491bc\n  R13: 000000000000006e R14: 00007ffe445d9420 R15: 00007ffe445d9508\n   </TASK>\n\nThe root cause is the bad handling of disconnect() generated internally\nby the MPTCP protocol in case of connect FASTOPEN errors.\n\nAddress the issue increasing the socket disconnect counter even on such\na case, to allow other threads waiting on the same socket lock to\nproperly error out.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21705",
               url: "https://www.suse.com/security/cve/CVE-2025-21705",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238525 for CVE-2025-21705",
               url: "https://bugzilla.suse.com/1238525",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21705",
      },
      {
         cve: "CVE-2025-21715",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21715",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: davicom: fix UAF in dm9000_drv_remove\n\ndm is netdev private data and it cannot be\nused after free_netdev() call. Using dm after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() at the end of the\nfunction.\n\nThis is similar to the issue fixed in commit\nad297cd2db89 (\"net: qcom/emac: fix UAF in emac_remove\").\n\nThis bug is detected by our static analysis tool.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21715",
               url: "https://www.suse.com/security/cve/CVE-2025-21715",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237889 for CVE-2025-21715",
               url: "https://bugzilla.suse.com/1237889",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21715",
      },
      {
         cve: "CVE-2025-21716",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21716",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix uninit-value in vxlan_vnifilter_dump()\n\nKMSAN reported an uninit-value access in vxlan_vnifilter_dump() [1].\n\nIf the length of the netlink message payload is less than\nsizeof(struct tunnel_msg), vxlan_vnifilter_dump() accesses bytes\nbeyond the message. This can lead to uninit-value access. Fix this by\nreturning an error in such situations.\n\n[1]\nBUG: KMSAN: uninit-value in vxlan_vnifilter_dump+0x328/0x920 drivers/net/vxlan/vxlan_vnifilter.c:422\n vxlan_vnifilter_dump+0x328/0x920 drivers/net/vxlan/vxlan_vnifilter.c:422\n rtnl_dumpit+0xd5/0x2f0 net/core/rtnetlink.c:6786\n netlink_dump+0x93e/0x15f0 net/netlink/af_netlink.c:2317\n __netlink_dump_start+0x716/0xd60 net/netlink/af_netlink.c:2432\n netlink_dump_start include/linux/netlink.h:340 [inline]\n rtnetlink_dump_start net/core/rtnetlink.c:6815 [inline]\n rtnetlink_rcv_msg+0x1256/0x14a0 net/core/rtnetlink.c:6882\n netlink_rcv_skb+0x467/0x660 net/netlink/af_netlink.c:2542\n rtnetlink_rcv+0x35/0x40 net/core/rtnetlink.c:6944\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0xed6/0x1290 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x1092/0x1230 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x330/0x3d0 net/socket.c:726\n ____sys_sendmsg+0x7f4/0xb50 net/socket.c:2583\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2637\n __sys_sendmsg net/socket.c:2669 [inline]\n __do_sys_sendmsg net/socket.c:2674 [inline]\n __se_sys_sendmsg net/socket.c:2672 [inline]\n __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2672\n x64_sys_call+0x3878/0x3d90 arch/x86/include/generated/asm/syscalls_64.h:47\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xd9/0x1d0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4110 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x800/0xe80 mm/slub.c:4205\n kmalloc_reserve+0x13b/0x4b0 net/core/skbuff.c:587\n __alloc_skb+0x347/0x7d0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n netlink_alloc_large_skb+0xa5/0x280 net/netlink/af_netlink.c:1196\n netlink_sendmsg+0xac9/0x1230 net/netlink/af_netlink.c:1866\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x330/0x3d0 net/socket.c:726\n ____sys_sendmsg+0x7f4/0xb50 net/socket.c:2583\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2637\n __sys_sendmsg net/socket.c:2669 [inline]\n __do_sys_sendmsg net/socket.c:2674 [inline]\n __se_sys_sendmsg net/socket.c:2672 [inline]\n __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2672\n x64_sys_call+0x3878/0x3d90 arch/x86/include/generated/asm/syscalls_64.h:47\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xd9/0x1d0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 0 UID: 0 PID: 30991 Comm: syz.4.10630 Not tainted 6.12.0-10694-gc44daa7e3c73 #29\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21716",
               url: "https://www.suse.com/security/cve/CVE-2025-21716",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237891 for CVE-2025-21716",
               url: "https://bugzilla.suse.com/1237891",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21716",
      },
      {
         cve: "CVE-2025-21719",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21719",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nipmr: do not call mr_mfc_uses_dev() for unres entries\n\nsyzbot found that calling mr_mfc_uses_dev() for unres entries\nwould crash [1], because c->mfc_un.res.minvif / c->mfc_un.res.maxvif\nalias to \"struct sk_buff_head unresolved\", which contain two pointers.\n\nThis code never worked, lets remove it.\n\n[1]\nUnable to handle kernel paging request at virtual address ffff5fff2d536613\nKASAN: maybe wild-memory-access in range [0xfffefff96a9b3098-0xfffefff96a9b309f]\nModules linked in:\nCPU: 1 UID: 0 PID: 7321 Comm: syz.0.16 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\npstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : mr_mfc_uses_dev net/ipv4/ipmr_base.c:290 [inline]\n pc : mr_table_dump+0x5a4/0x8b0 net/ipv4/ipmr_base.c:334\n lr : mr_mfc_uses_dev net/ipv4/ipmr_base.c:289 [inline]\n lr : mr_table_dump+0x694/0x8b0 net/ipv4/ipmr_base.c:334\nCall trace:\n  mr_mfc_uses_dev net/ipv4/ipmr_base.c:290 [inline] (P)\n  mr_table_dump+0x5a4/0x8b0 net/ipv4/ipmr_base.c:334 (P)\n  mr_rtm_dumproute+0x254/0x454 net/ipv4/ipmr_base.c:382\n  ipmr_rtm_dumproute+0x248/0x4b4 net/ipv4/ipmr.c:2648\n  rtnl_dump_all+0x2e4/0x4e8 net/core/rtnetlink.c:4327\n  rtnl_dumpit+0x98/0x1d0 net/core/rtnetlink.c:6791\n  netlink_dump+0x4f0/0xbc0 net/netlink/af_netlink.c:2317\n  netlink_recvmsg+0x56c/0xe64 net/netlink/af_netlink.c:1973\n  sock_recvmsg_nosec net/socket.c:1033 [inline]\n  sock_recvmsg net/socket.c:1055 [inline]\n  sock_read_iter+0x2d8/0x40c net/socket.c:1125\n  new_sync_read fs/read_write.c:484 [inline]\n  vfs_read+0x740/0x970 fs/read_write.c:565\n  ksys_read+0x15c/0x26c fs/read_write.c:708",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21719",
               url: "https://www.suse.com/security/cve/CVE-2025-21719",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238860 for CVE-2025-21719",
               url: "https://bugzilla.suse.com/1238860",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21719",
      },
      {
         cve: "CVE-2025-21724",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21724",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()\n\nResolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index()\nwhere shifting the constant \"1\" (of type int) by bitmap->mapped.pgshift\n(an unsigned long value) could result in undefined behavior.\n\nThe constant \"1\" defaults to a 32-bit \"int\", and when \"pgshift\" exceeds\n31 (e.g., pgshift = 63) the shift operation overflows, as the result\ncannot be represented in a 32-bit type.\n\nTo resolve this, the constant is updated to \"1UL\", promoting it to an\nunsigned long type to match the operand's type.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21724",
               url: "https://www.suse.com/security/cve/CVE-2025-21724",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238863 for CVE-2025-21724",
               url: "https://bugzilla.suse.com/1238863",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21724",
      },
      {
         cve: "CVE-2025-21725",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21725",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix oops due to unset link speed\n\nIt isn't guaranteed that NETWORK_INTERFACE_INFO::LinkSpeed will always\nbe set by the server, so the client must handle any values and then\nprevent oopses like below from happening:\n\nOops: divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 0 UID: 0 PID: 1323 Comm: cat Not tainted 6.13.0-rc7 #2\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nRIP: 0010:cifs_debug_data_proc_show+0xa45/0x1460 [cifs] Code: 00 00 48\n89 df e8 3b cd 1b c1 41 f6 44 24 2c 04 0f 84 50 01 00 00 48 89 ef e8\ne7 d0 1b c1 49 8b 44 24 18 31 d2 49 8d 7c 24 28 <48> f7 74 24 18 48 89\nc3 e8 6e cf 1b c1 41 8b 6c 24 28 49 8d 7c 24\nRSP: 0018:ffffc90001817be0 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffff88811230022c RCX: ffffffffc041bd99\nRDX: 0000000000000000 RSI: 0000000000000567 RDI: ffff888112300228\nRBP: ffff888112300218 R08: fffff52000302f5f R09: ffffed1022fa58ac\nR10: ffff888117d2c566 R11: 00000000fffffffe R12: ffff888112300200\nR13: 000000012a15343f R14: 0000000000000001 R15: ffff888113f2db58\nFS: 00007fe27119e740(0000) GS:ffff888148600000(0000)\nknlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fe2633c5000 CR3: 0000000124da0000 CR4: 0000000000750ef0\nPKRU: 55555554\nCall Trace:\n <TASK>\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0x159/0x1b0\n ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs]\n ? do_error_trap+0x90/0x130\n ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs]\n ? exc_divide_error+0x39/0x50\n ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs]\n ? asm_exc_divide_error+0x1a/0x20\n ? cifs_debug_data_proc_show+0xa39/0x1460 [cifs]\n ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs]\n ? seq_read_iter+0x42e/0x790\n seq_read_iter+0x19a/0x790\n proc_reg_read_iter+0xbe/0x110\n ? __pfx_proc_reg_read_iter+0x10/0x10\n vfs_read+0x469/0x570\n ? do_user_addr_fault+0x398/0x760\n ? __pfx_vfs_read+0x10/0x10\n ? find_held_lock+0x8a/0xa0\n ? __pfx_lock_release+0x10/0x10\n ksys_read+0xd3/0x170\n ? __pfx_ksys_read+0x10/0x10\n ? __rcu_read_unlock+0x50/0x270\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fe271288911\nCode: 00 48 8b 15 01 25 10 00 f7 d8 64 89 02 b8 ff ff ff ff eb bd e8\n20 ad 01 00 f3 0f 1e fa 80 3d b5 a7 10 00 00 74 13 31 c0 0f 05 <48> 3d\n00 f0 ff ff 77 4f c3 66 0f 1f 44 00 00 55 48 89 e5 48 83 ec\nRSP: 002b:00007ffe87c079d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000\nRAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe271288911\nRDX: 0000000000040000 RSI: 00007fe2633c6000 RDI: 0000000000000003\nRBP: 00007ffe87c07a00 R08: 0000000000000000 R09: 00007fe2713e6380\nR10: 0000000000000022 R11: 0000000000000246 R12: 0000000000040000\nR13: 00007fe2633c6000 R14: 0000000000000003 R15: 0000000000000000\n </TASK>\n\nFix this by setting cifs_server_iface::speed to a sane value (1Gbps)\nby default when link speed is unset.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21725",
               url: "https://www.suse.com/security/cve/CVE-2025-21725",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238877 for CVE-2025-21725",
               url: "https://bugzilla.suse.com/1238877",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21725",
      },
      {
         cve: "CVE-2025-21728",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21728",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Send signals asynchronously if !preemptible\n\nBPF programs can execute in all kinds of contexts and when a program\nrunning in a non-preemptible context uses the bpf_send_signal() kfunc,\nit will cause issues because this kfunc can sleep.\nChange `irqs_disabled()` to `!preemptible()`.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21728",
               url: "https://www.suse.com/security/cve/CVE-2025-21728",
            },
            {
               category: "external",
               summary: "SUSE Bug 1237879 for CVE-2025-21728",
               url: "https://bugzilla.suse.com/1237879",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21728",
      },
      {
         cve: "CVE-2025-21767",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21767",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context\n\nThe following bug report happened with a PREEMPT_RT kernel:\n\n  BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n  in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2012, name: kwatchdog\n  preempt_count: 1, expected: 0\n  RCU nest depth: 0, expected: 0\n  get_random_u32+0x4f/0x110\n  clocksource_verify_choose_cpus+0xab/0x1a0\n  clocksource_verify_percpu.part.0+0x6b/0x330\n  clocksource_watchdog_kthread+0x193/0x1a0\n\nIt is due to the fact that clocksource_verify_choose_cpus() is invoked with\npreemption disabled.  This function invokes get_random_u32() to obtain\nrandom numbers for choosing CPUs.  The batched_entropy_32 local lock and/or\nthe base_crng.lock spinlock in driver/char/random.c will be acquired during\nthe call. In PREEMPT_RT kernel, they are both sleeping locks and so cannot\nbe acquired in atomic context.\n\nFix this problem by using migrate_disable() to allow smp_processor_id() to\nbe reliably used without introducing atomic context. preempt_disable() is\nthen called after clocksource_verify_choose_cpus() but before the\nclocksource measurement is being run to avoid introducing unexpected\nlatency.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21767",
               url: "https://www.suse.com/security/cve/CVE-2025-21767",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238509 for CVE-2025-21767",
               url: "https://bugzilla.suse.com/1238509",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21767",
      },
      {
         cve: "CVE-2025-21790",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21790",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: check vxlan_vnigroup_init() return value\n\nvxlan_init() must check vxlan_vnigroup_init() success\notherwise a crash happens later, spotted by syzbot.\n\nOops: general protection fault, probably for non-canonical address 0xdffffc000000002c: 0000 [#1] PREEMPT SMP KASAN NOPTI\nKASAN: null-ptr-deref in range [0x0000000000000160-0x0000000000000167]\nCPU: 0 UID: 0 PID: 7313 Comm: syz-executor147 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\n RIP: 0010:vxlan_vnigroup_uninit+0x89/0x500 drivers/net/vxlan/vxlan_vnifilter.c:912\nCode: 00 48 8b 44 24 08 4c 8b b0 98 41 00 00 49 8d 86 60 01 00 00 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4d 04 00 00 49 8b 86 60 01 00 00 48 ba 00 00 00\nRSP: 0018:ffffc9000cc1eea8 EFLAGS: 00010202\nRAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff8672effb\nRDX: 000000000000002c RSI: ffffffff8672ecb9 RDI: ffff8880461b4f18\nRBP: ffff8880461b4ef4 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000001 R11: 0000000000000000 R12: 0000000000020000\nR13: ffff8880461b0d80 R14: 0000000000000000 R15: dffffc0000000000\nFS:  00007fecfa95d6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fecfa95cfb8 CR3: 000000004472c000 CR4: 0000000000352ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n  vxlan_uninit+0x1ab/0x200 drivers/net/vxlan/vxlan_core.c:2942\n  unregister_netdevice_many_notify+0x12d6/0x1f30 net/core/dev.c:11824\n  unregister_netdevice_many net/core/dev.c:11866 [inline]\n  unregister_netdevice_queue+0x307/0x3f0 net/core/dev.c:11736\n  register_netdevice+0x1829/0x1eb0 net/core/dev.c:10901\n  __vxlan_dev_create+0x7c6/0xa30 drivers/net/vxlan/vxlan_core.c:3981\n  vxlan_newlink+0xd1/0x130 drivers/net/vxlan/vxlan_core.c:4407\n  rtnl_newlink_create net/core/rtnetlink.c:3795 [inline]\n  __rtnl_newlink net/core/rtnetlink.c:3906 [inline]",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21790",
               url: "https://www.suse.com/security/cve/CVE-2025-21790",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238753 for CVE-2025-21790",
               url: "https://bugzilla.suse.com/1238753",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21790",
      },
      {
         cve: "CVE-2025-21795",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21795",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: fix hang in nfsd4_shutdown_callback\n\nIf nfs4_client is in courtesy state then there is no point to send\nthe callback. This causes nfsd4_shutdown_callback to hang since\ncl_cb_inflight is not 0. This hang lasts about 15 minutes until TCP\nnotifies NFSD that the connection was dropped.\n\nThis patch modifies nfsd4_run_cb_work to skip the RPC call if\nnfs4_client is in courtesy state.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21795",
               url: "https://www.suse.com/security/cve/CVE-2025-21795",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238759 for CVE-2025-21795",
               url: "https://bugzilla.suse.com/1238759",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21795",
      },
      {
         cve: "CVE-2025-21799",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21799",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()\n\nWhen getting the IRQ we use k3_udma_glue_tx_get_irq() which returns\nnegative error value on error. So not NULL check is not sufficient\nto deteremine if IRQ is valid. Check that IRQ is greater then zero\nto ensure it is valid.\n\nThere is no issue at probe time but at runtime user can invoke\n.set_channels which results in the following call chain.\nam65_cpsw_set_channels()\n am65_cpsw_nuss_update_tx_rx_chns()\n  am65_cpsw_nuss_remove_tx_chns()\n  am65_cpsw_nuss_init_tx_chns()\n\nAt this point if am65_cpsw_nuss_init_tx_chns() fails due to\nk3_udma_glue_tx_get_irq() then tx_chn->irq will be set to a\nnegative value.\n\nThen, at subsequent .set_channels with higher channel count we\nwill attempt to free an invalid IRQ in am65_cpsw_nuss_remove_tx_chns()\nleading to a kernel warning.\n\nThe issue is present in the original commit that introduced this driver,\nalthough there, am65_cpsw_nuss_update_tx_rx_chns() existed as\nam65_cpsw_nuss_update_tx_chns().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21799",
               url: "https://www.suse.com/security/cve/CVE-2025-21799",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238739 for CVE-2025-21799",
               url: "https://bugzilla.suse.com/1238739",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21799",
      },
      {
         cve: "CVE-2025-21802",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-21802",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix oops when unload drivers paralleling\n\nWhen unload hclge driver, it tries to disable sriov first for each\nae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at\nthe time, because it removes all the ae_dev nodes, and it may cause\noops.\n\nBut we can't simply use hnae3_common_lock for this. Because in the\nprocess flow of pci_disable_sriov(), it will trigger the remove flow\nof VF, which will also take hnae3_common_lock.\n\nTo fixes it, introduce a new mutex to protect the unload process.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
               "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
               "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-21802",
               url: "https://www.suse.com/security/cve/CVE-2025-21802",
            },
            {
               category: "external",
               summary: "SUSE Bug 1238751 for CVE-2025-21802",
               url: "https://bugzilla.suse.com/1238751",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_29-rt-1-150600.1.3.2.x86_64",
                  "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.29.1.noarch",
                  "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.29.1.x86_64",
                  "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-19T16:11:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-21802",
      },
   ],
}