RHSA-2022:1988
Vulnerability from csaf_opensuse - Published: 2022-05-10 00:00 - Updated: 2026-09-15 08:43Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2022:1988.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2022:1988.
Patchnames: RHSA-2022:1988
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.2 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
low
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
low
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
8.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
6.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
low
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2020-0404
Threats
Impact
moderate
References
229 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2022:1988.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:1988.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2022:1988",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_1988.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0404 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-13974 page",
"url": "https://www.suse.com/security/cve/CVE-2020-13974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27820 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-4788 page",
"url": "https://www.suse.com/security/cve/CVE-2020-4788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0941 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-20322 page",
"url": "https://www.suse.com/security/cve/CVE-2021-20322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21781 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-26401 page",
"url": "https://www.suse.com/security/cve/CVE-2021-26401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29154 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3612 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3612/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3669 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37159 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3743 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3744 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3752 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3759 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3764 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3773 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3923 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4002 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4037 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-40490 page",
"url": "https://www.suse.com/security/cve/CVE-2021-40490/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4083 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4093 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4157 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-41864 page",
"url": "https://www.suse.com/security/cve/CVE-2021-41864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4197 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4203 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-42739 page",
"url": "https://www.suse.com/security/cve/CVE-2021-42739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-43056 page",
"url": "https://www.suse.com/security/cve/CVE-2021-43056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-43389 page",
"url": "https://www.suse.com/security/cve/CVE-2021-43389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-43976 page",
"url": "https://www.suse.com/security/cve/CVE-2021-43976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4460 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-44733 page",
"url": "https://www.suse.com/security/cve/CVE-2021-44733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-45485 page",
"url": "https://www.suse.com/security/cve/CVE-2021-45485/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-45486 page",
"url": "https://www.suse.com/security/cve/CVE-2021-45486/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47076 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47178 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47203 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47301 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47301/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47435 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47498 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47501 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47544 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47556 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47590 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47614 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0001 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0002 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0286 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0286/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0322 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0850 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1011 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3105 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3106 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3108 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-48771 page",
"url": "https://www.suse.com/security/cve/CVE-2022-48771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-48904 page",
"url": "https://www.suse.com/security/cve/CVE-2022-48904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49227 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50131 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50475 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50510 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50536 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53570 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53649 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53649/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-15T08:43:38Z",
"generator": {
"date": "2022-05-10T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2022:1988",
"initial_release_date": "2022-05-10T00:00:00Z",
"revision_history": [
{
"date": "2022-05-10T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-15T08:43:38Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch"
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-372.9.1.el8.noarch",
"product": {
"name": "kernel-doc-4.18.0-372.9.1.el8.noarch",
"product_id": "kernel-doc-4.18.0-372.9.1.el8.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "bpftool-4.18.0-372.9.1.el8.x86_64",
"product_id": "bpftool-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-core-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-core-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-cross-headers-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-debug-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-debug-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-debug-core-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-debug-devel-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-debug-modules-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-devel-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-devel-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-headers-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-headers-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-modules-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-modules-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-modules-extra-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-tools-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-tools-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-tools-libs-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "perf-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "perf-4.18.0-372.9.1.el8.x86_64",
"product_id": "perf-4.18.0-372.9.1.el8.x86_64"
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-372.9.1.el8.x86_64",
"product": {
"name": "python3-perf-4.18.0-372.9.1.el8.x86_64",
"product_id": "python3-perf-4.18.0-372.9.1.el8.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "bpftool-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-core-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-debug-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-devel-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-372.9.1.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch"
},
"product_reference": "kernel-doc-4.18.0-372.9.1.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-headers-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-modules-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-tools-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "perf-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-372.9.1.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
},
"product_reference": "python3-perf-4.18.0-372.9.1.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-0404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0404"
}
],
"notes": [
{
"category": "general",
"text": "In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0404",
"url": "https://www.suse.com/security/cve/CVE-2020-0404"
},
{
"category": "external",
"summary": "SUSE Bug 1176423 for CVE-2020-0404",
"url": "https://bugzilla.suse.com/1176423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-0404"
},
{
"cve": "CVE-2020-13974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-13974"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-13974",
"url": "https://www.suse.com/security/cve/CVE-2020-13974"
},
{
"category": "external",
"summary": "SUSE Bug 1172775 for CVE-2020-13974",
"url": "https://bugzilla.suse.com/1172775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-13974"
},
{
"cve": "CVE-2020-27820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27820"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in Linux kernel, where a use-after-frees in nouveau\u0027s postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if \"unbind\" the driver).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27820",
"url": "https://www.suse.com/security/cve/CVE-2020-27820"
},
{
"category": "external",
"summary": "SUSE Bug 1179599 for CVE-2020-27820",
"url": "https://bugzilla.suse.com/1179599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-27820"
},
{
"cve": "CVE-2020-4788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-4788"
}
],
"notes": [
{
"category": "general",
"text": "IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-4788",
"url": "https://www.suse.com/security/cve/CVE-2020-4788"
},
{
"category": "external",
"summary": "SUSE Bug 1177666 for CVE-2020-4788",
"url": "https://bugzilla.suse.com/1177666"
},
{
"category": "external",
"summary": "SUSE Bug 1181158 for CVE-2020-4788",
"url": "https://bugzilla.suse.com/1181158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-4788"
},
{
"cve": "CVE-2021-0941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0941"
}
],
"notes": [
{
"category": "general",
"text": "In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0941",
"url": "https://www.suse.com/security/cve/CVE-2021-0941"
},
{
"category": "external",
"summary": "SUSE Bug 1192045 for CVE-2021-0941",
"url": "https://bugzilla.suse.com/1192045"
},
{
"category": "external",
"summary": "SUSE Bug 1192048 for CVE-2021-0941",
"url": "https://bugzilla.suse.com/1192048"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-0941"
},
{
"cve": "CVE-2021-20322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-20322"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-20322",
"url": "https://www.suse.com/security/cve/CVE-2021-20322"
},
{
"category": "external",
"summary": "SUSE Bug 1191790 for CVE-2021-20322",
"url": "https://bugzilla.suse.com/1191790"
},
{
"category": "external",
"summary": "SUSE Bug 1191813 for CVE-2021-20322",
"url": "https://bugzilla.suse.com/1191813"
},
{
"category": "external",
"summary": "SUSE Bug 1193290 for CVE-2021-20322",
"url": "https://bugzilla.suse.com/1193290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-20322"
},
{
"cve": "CVE-2021-21781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21781"
}
],
"notes": [
{
"category": "general",
"text": "An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process\u0027s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21781",
"url": "https://www.suse.com/security/cve/CVE-2021-21781"
},
{
"category": "external",
"summary": "SUSE Bug 1188445 for CVE-2021-21781",
"url": "https://bugzilla.suse.com/1188445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21781"
},
{
"cve": "CVE-2021-26401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-26401"
}
],
"notes": [
{
"category": "general",
"text": "LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-26401",
"url": "https://www.suse.com/security/cve/CVE-2021-26401"
},
{
"category": "external",
"summary": "SUSE Bug 1191580 for CVE-2021-26401",
"url": "https://bugzilla.suse.com/1191580"
},
{
"category": "external",
"summary": "SUSE Bug 1196901 for CVE-2021-26401",
"url": "https://bugzilla.suse.com/1196901"
},
{
"category": "external",
"summary": "SUSE Bug 1209630 for CVE-2021-26401",
"url": "https://bugzilla.suse.com/1209630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-26401"
},
{
"cve": "CVE-2021-29154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29154"
}
],
"notes": [
{
"category": "general",
"text": "BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29154",
"url": "https://www.suse.com/security/cve/CVE-2021-29154"
},
{
"category": "external",
"summary": "SUSE Bug 1184391 for CVE-2021-29154",
"url": "https://bugzilla.suse.com/1184391"
},
{
"category": "external",
"summary": "SUSE Bug 1184710 for CVE-2021-29154",
"url": "https://bugzilla.suse.com/1184710"
},
{
"category": "external",
"summary": "SUSE Bug 1186408 for CVE-2021-29154",
"url": "https://bugzilla.suse.com/1186408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29154"
},
{
"cve": "CVE-2021-3612",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3612"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds memory write flaw was found in the Linux kernel\u0027s joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3612",
"url": "https://www.suse.com/security/cve/CVE-2021-3612"
},
{
"category": "external",
"summary": "SUSE Bug 1187585 for CVE-2021-3612",
"url": "https://bugzilla.suse.com/1187585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3612"
},
{
"cve": "CVE-2021-3669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3669"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3669",
"url": "https://www.suse.com/security/cve/CVE-2021-3669"
},
{
"category": "external",
"summary": "SUSE Bug 1188986 for CVE-2021-3669",
"url": "https://bugzilla.suse.com/1188986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3669"
},
{
"cve": "CVE-2021-37159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37159"
}
],
"notes": [
{
"category": "general",
"text": "hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37159",
"url": "https://www.suse.com/security/cve/CVE-2021-37159"
},
{
"category": "external",
"summary": "SUSE Bug 1188601 for CVE-2021-37159",
"url": "https://bugzilla.suse.com/1188601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37159"
},
{
"cve": "CVE-2021-3743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3743"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3743",
"url": "https://www.suse.com/security/cve/CVE-2021-3743"
},
{
"category": "external",
"summary": "SUSE Bug 1189883 for CVE-2021-3743",
"url": "https://bugzilla.suse.com/1189883"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3743"
},
{
"cve": "CVE-2021-3744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3744"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3744",
"url": "https://www.suse.com/security/cve/CVE-2021-3744"
},
{
"category": "external",
"summary": "SUSE Bug 1189884 for CVE-2021-3744",
"url": "https://bugzilla.suse.com/1189884"
},
{
"category": "external",
"summary": "SUSE Bug 1190534 for CVE-2021-3744",
"url": "https://bugzilla.suse.com/1190534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3744"
},
{
"cve": "CVE-2021-3752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3752"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3752",
"url": "https://www.suse.com/security/cve/CVE-2021-3752"
},
{
"category": "external",
"summary": "SUSE Bug 1190023 for CVE-2021-3752",
"url": "https://bugzilla.suse.com/1190023"
},
{
"category": "external",
"summary": "SUSE Bug 1190432 for CVE-2021-3752",
"url": "https://bugzilla.suse.com/1190432"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3752"
},
{
"cve": "CVE-2021-3759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3759"
}
],
"notes": [
{
"category": "general",
"text": "A memory overflow vulnerability was found in the Linux kernel\u0027s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3759",
"url": "https://www.suse.com/security/cve/CVE-2021-3759"
},
{
"category": "external",
"summary": "SUSE Bug 1190115 for CVE-2021-3759",
"url": "https://bugzilla.suse.com/1190115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3759"
},
{
"cve": "CVE-2021-3764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3764"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in the Linux kernel\u0027s ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3764",
"url": "https://www.suse.com/security/cve/CVE-2021-3764"
},
{
"category": "external",
"summary": "SUSE Bug 1190534 for CVE-2021-3764",
"url": "https://bugzilla.suse.com/1190534"
},
{
"category": "external",
"summary": "SUSE Bug 1194518 for CVE-2021-3764",
"url": "https://bugzilla.suse.com/1194518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3764"
},
{
"cve": "CVE-2021-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3772",
"url": "https://www.suse.com/security/cve/CVE-2021-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1190351 for CVE-2021-3772",
"url": "https://bugzilla.suse.com/1190351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3772"
},
{
"cve": "CVE-2021-3773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3773"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3773",
"url": "https://www.suse.com/security/cve/CVE-2021-3773"
},
{
"category": "external",
"summary": "SUSE Bug 1189897 for CVE-2021-3773",
"url": "https://bugzilla.suse.com/1189897"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3773"
},
{
"cve": "CVE-2021-3923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3923"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3923",
"url": "https://www.suse.com/security/cve/CVE-2021-3923"
},
{
"category": "external",
"summary": "SUSE Bug 1209778 for CVE-2021-3923",
"url": "https://bugzilla.suse.com/1209778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-3923"
},
{
"cve": "CVE-2021-4002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4002"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw in the Linux kernel\u0027s hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4002",
"url": "https://www.suse.com/security/cve/CVE-2021-4002"
},
{
"category": "external",
"summary": "SUSE Bug 1192946 for CVE-2021-4002",
"url": "https://bugzilla.suse.com/1192946"
},
{
"category": "external",
"summary": "SUSE Bug 1192973 for CVE-2021-4002",
"url": "https://bugzilla.suse.com/1192973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4002"
},
{
"cve": "CVE-2021-4037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4037"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4037",
"url": "https://www.suse.com/security/cve/CVE-2021-4037"
},
{
"category": "external",
"summary": "SUSE Bug 1198702 for CVE-2021-4037",
"url": "https://bugzilla.suse.com/1198702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4037"
},
{
"cve": "CVE-2021-40490",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-40490"
}
],
"notes": [
{
"category": "general",
"text": "A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-40490",
"url": "https://www.suse.com/security/cve/CVE-2021-40490"
},
{
"category": "external",
"summary": "SUSE Bug 1190159 for CVE-2021-40490",
"url": "https://bugzilla.suse.com/1190159"
},
{
"category": "external",
"summary": "SUSE Bug 1192775 for CVE-2021-40490",
"url": "https://bugzilla.suse.com/1192775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-40490"
},
{
"cve": "CVE-2021-4083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4083"
}
],
"notes": [
{
"category": "general",
"text": "A read-after-free memory flaw was found in the Linux kernel\u0027s garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4083",
"url": "https://www.suse.com/security/cve/CVE-2021-4083"
},
{
"category": "external",
"summary": "SUSE Bug 1193727 for CVE-2021-4083",
"url": "https://bugzilla.suse.com/1193727"
},
{
"category": "external",
"summary": "SUSE Bug 1194460 for CVE-2021-4083",
"url": "https://bugzilla.suse.com/1194460"
},
{
"category": "external",
"summary": "SUSE Bug 1196722 for CVE-2021-4083",
"url": "https://bugzilla.suse.com/1196722"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4083"
},
{
"cve": "CVE-2021-4093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4093"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the KVM\u0027s AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4093",
"url": "https://www.suse.com/security/cve/CVE-2021-4093"
},
{
"category": "external",
"summary": "SUSE Bug 1193716 for CVE-2021-4093",
"url": "https://bugzilla.suse.com/1193716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4093"
},
{
"cve": "CVE-2021-4157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4157"
}
],
"notes": [
{
"category": "general",
"text": "An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4157",
"url": "https://www.suse.com/security/cve/CVE-2021-4157"
},
{
"category": "external",
"summary": "SUSE Bug 1194013 for CVE-2021-4157",
"url": "https://bugzilla.suse.com/1194013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4157"
},
{
"cve": "CVE-2021-41864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-41864"
}
],
"notes": [
{
"category": "general",
"text": "prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-41864",
"url": "https://www.suse.com/security/cve/CVE-2021-41864"
},
{
"category": "external",
"summary": "SUSE Bug 1191317 for CVE-2021-41864",
"url": "https://bugzilla.suse.com/1191317"
},
{
"category": "external",
"summary": "SUSE Bug 1191318 for CVE-2021-41864",
"url": "https://bugzilla.suse.com/1191318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-41864"
},
{
"cve": "CVE-2021-4197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4197"
}
],
"notes": [
{
"category": "general",
"text": "An unprivileged write to the file handler flaw in the Linux kernel\u0027s control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4197",
"url": "https://www.suse.com/security/cve/CVE-2021-4197"
},
{
"category": "external",
"summary": "SUSE Bug 1194302 for CVE-2021-4197",
"url": "https://bugzilla.suse.com/1194302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4197"
},
{
"cve": "CVE-2021-4203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4203"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4203",
"url": "https://www.suse.com/security/cve/CVE-2021-4203"
},
{
"category": "external",
"summary": "SUSE Bug 1194535 for CVE-2021-4203",
"url": "https://bugzilla.suse.com/1194535"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4203"
},
{
"cve": "CVE-2021-42739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-42739"
}
],
"notes": [
{
"category": "general",
"text": "The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-42739",
"url": "https://www.suse.com/security/cve/CVE-2021-42739"
},
{
"category": "external",
"summary": "SUSE Bug 1184673 for CVE-2021-42739",
"url": "https://bugzilla.suse.com/1184673"
},
{
"category": "external",
"summary": "SUSE Bug 1192036 for CVE-2021-42739",
"url": "https://bugzilla.suse.com/1192036"
},
{
"category": "external",
"summary": "SUSE Bug 1196722 for CVE-2021-42739",
"url": "https://bugzilla.suse.com/1196722"
},
{
"category": "external",
"summary": "SUSE Bug 1196914 for CVE-2021-42739",
"url": "https://bugzilla.suse.com/1196914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-42739"
},
{
"cve": "CVE-2021-43056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-43056"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-43056",
"url": "https://www.suse.com/security/cve/CVE-2021-43056"
},
{
"category": "external",
"summary": "SUSE Bug 1192107 for CVE-2021-43056",
"url": "https://bugzilla.suse.com/1192107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-43056"
},
{
"cve": "CVE-2021-43389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-43389"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-43389",
"url": "https://www.suse.com/security/cve/CVE-2021-43389"
},
{
"category": "external",
"summary": "SUSE Bug 1191958 for CVE-2021-43389",
"url": "https://bugzilla.suse.com/1191958"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-43389"
},
{
"cve": "CVE-2021-43976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-43976"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-43976",
"url": "https://www.suse.com/security/cve/CVE-2021-43976"
},
{
"category": "external",
"summary": "SUSE Bug 1192847 for CVE-2021-43976",
"url": "https://bugzilla.suse.com/1192847"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-43976"
},
{
"cve": "CVE-2021-4460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4460"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix UBSAN shift-out-of-bounds warning\n\nIf get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up\ndoing a shift operation where the number of bits shifted equals\nnumber of bits in the operand. This behaviour is undefined.\n\nSet num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the\ncount is \u003e= number of bits in the operand.\n\nBug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4460",
"url": "https://www.suse.com/security/cve/CVE-2021-4460"
},
{
"category": "external",
"summary": "SUSE Bug 1250764 for CVE-2021-4460",
"url": "https://bugzilla.suse.com/1250764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4460"
},
{
"cve": "CVE-2021-44733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-44733"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-44733",
"url": "https://www.suse.com/security/cve/CVE-2021-44733"
},
{
"category": "external",
"summary": "SUSE Bug 1193767 for CVE-2021-44733",
"url": "https://bugzilla.suse.com/1193767"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-44733"
},
{
"cve": "CVE-2021-45485",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-45485"
}
],
"notes": [
{
"category": "general",
"text": "In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn\u0027t properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-45485",
"url": "https://www.suse.com/security/cve/CVE-2021-45485"
},
{
"category": "external",
"summary": "SUSE Bug 1194094 for CVE-2021-45485",
"url": "https://bugzilla.suse.com/1194094"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-45485"
},
{
"cve": "CVE-2021-45486",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-45486"
}
],
"notes": [
{
"category": "general",
"text": "In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-45486",
"url": "https://www.suse.com/security/cve/CVE-2021-45486"
},
{
"category": "external",
"summary": "SUSE Bug 1194087 for CVE-2021-45486",
"url": "https://bugzilla.suse.com/1194087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-45486"
},
{
"cve": "CVE-2021-47076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47076"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Return CQE error if invalid lkey was supplied\n\nRXE is missing update of WQE status in LOCAL_WRITE failures. This caused\nthe following kernel panic if someone sent an atomic operation with an\nexplicitly wrong lkey.\n\n[leonro@vm ~]$ mkt test\ntest_atomic_invalid_lkey (tests.test_atomic.AtomicTest) ...\n WARNING: CPU: 5 PID: 263 at drivers/infiniband/sw/rxe/rxe_comp.c:740 rxe_completer+0x1a6d/0x2e30 [rdma_rxe]\n Modules linked in: crc32_generic rdma_rxe ip6_udp_tunnel udp_tunnel rdma_ucm rdma_cm ib_umad ib_ipoib iw_cm ib_cm mlx5_ib ib_uverbs ib_core mlx5_core ptp pps_core\n CPU: 5 PID: 263 Comm: python3 Not tainted 5.13.0-rc1+ #2936\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n RIP: 0010:rxe_completer+0x1a6d/0x2e30 [rdma_rxe]\n Code: 03 0f 8e 65 0e 00 00 3b 93 10 06 00 00 0f 84 82 0a 00 00 4c 89 ff 4c 89 44 24 38 e8 2d 74 a9 e1 4c 8b 44 24 38 e9 1c f5 ff ff \u003c0f\u003e 0b e9 0c e8 ff ff b8 05 00 00 00 41 bf 05 00 00 00 e9 ab e7 ff\n RSP: 0018:ffff8880158af090 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: ffff888016a78000 RCX: ffffffffa0cf1652\n RDX: 1ffff9200004b442 RSI: 0000000000000004 RDI: ffffc9000025a210\n RBP: dffffc0000000000 R08: 00000000ffffffea R09: ffff88801617740b\n R10: ffffed1002c2ee81 R11: 0000000000000007 R12: ffff88800f3b63e8\n R13: ffff888016a78008 R14: ffffc9000025a180 R15: 000000000000000c\n FS: 00007f88b622a740(0000) GS:ffff88806d540000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f88b5a1fa10 CR3: 000000000d848004 CR4: 0000000000370ea0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n rxe_do_task+0x130/0x230 [rdma_rxe]\n rxe_rcv+0xb11/0x1df0 [rdma_rxe]\n rxe_loopback+0x157/0x1e0 [rdma_rxe]\n rxe_responder+0x5532/0x7620 [rdma_rxe]\n rxe_do_task+0x130/0x230 [rdma_rxe]\n rxe_rcv+0x9c8/0x1df0 [rdma_rxe]\n rxe_loopback+0x157/0x1e0 [rdma_rxe]\n rxe_requester+0x1efd/0x58c0 [rdma_rxe]\n rxe_do_task+0x130/0x230 [rdma_rxe]\n rxe_post_send+0x998/0x1860 [rdma_rxe]\n ib_uverbs_post_send+0xd5f/0x1220 [ib_uverbs]\n ib_uverbs_write+0x847/0xc80 [ib_uverbs]\n vfs_write+0x1c5/0x840\n ksys_write+0x176/0x1d0\n do_syscall_64+0x3f/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47076",
"url": "https://www.suse.com/security/cve/CVE-2021-47076"
},
{
"category": "external",
"summary": "SUSE Bug 1220860 for CVE-2021-47076",
"url": "https://bugzilla.suse.com/1220860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47076"
},
{
"cve": "CVE-2021-47178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47178"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: core: Avoid smp_processor_id() in preemptible code\n\nThe BUG message \"BUG: using smp_processor_id() in preemptible [00000000]\ncode\" was observed for TCMU devices with kernel config DEBUG_PREEMPT.\n\nThe message was observed when blktests block/005 was run on TCMU devices\nwith fileio backend or user:zbc backend [1]. The commit 1130b499b4a7\n(\"scsi: target: tcm_loop: Use LIO wq cmd submission helper\") triggered the\nsymptom. The commit modified work queue to handle commands and changed\n\u0027current-\u003enr_cpu_allowed\u0027 at smp_processor_id() call.\n\nThe message was also observed at system shutdown when TCMU devices were not\ncleaned up [2]. The function smp_processor_id() was called in SCSI host\nwork queue for abort handling, and triggered the BUG message. This symptom\nwas observed regardless of the commit 1130b499b4a7 (\"scsi: target:\ntcm_loop: Use LIO wq cmd submission helper\").\n\nTo avoid the preemptible code check at smp_processor_id(), get CPU ID with\nraw_smp_processor_id() instead. The CPU ID is used for performance\nimprovement then thread move to other CPU will not affect the code.\n\n[1]\n\n[ 56.468103] run blktests block/005 at 2021-05-12 14:16:38\n[ 57.369473] check_preemption_disabled: 85 callbacks suppressed\n[ 57.369480] BUG: using smp_processor_id() in preemptible [00000000] code: fio/1511\n[ 57.369506] BUG: using smp_processor_id() in preemptible [00000000] code: fio/1510\n[ 57.369512] BUG: using smp_processor_id() in preemptible [00000000] code: fio/1506\n[ 57.369552] caller is __target_init_cmd+0x157/0x170 [target_core_mod]\n[ 57.369606] CPU: 4 PID: 1506 Comm: fio Not tainted 5.13.0-rc1+ #34\n[ 57.369613] Hardware name: System manufacturer System Product Name/PRIME Z270-A, BIOS 1302 03/15/2018\n[ 57.369617] Call Trace:\n[ 57.369621] BUG: using smp_processor_id() in preemptible [00000000] code: fio/1507\n[ 57.369628] dump_stack+0x6d/0x89\n[ 57.369642] check_preemption_disabled+0xc8/0xd0\n[ 57.369628] caller is __target_init_cmd+0x157/0x170 [target_core_mod]\n[ 57.369655] __target_init_cmd+0x157/0x170 [target_core_mod]\n[ 57.369695] target_init_cmd+0x76/0x90 [target_core_mod]\n[ 57.369732] tcm_loop_queuecommand+0x109/0x210 [tcm_loop]\n[ 57.369744] scsi_queue_rq+0x38e/0xc40\n[ 57.369761] __blk_mq_try_issue_directly+0x109/0x1c0\n[ 57.369779] blk_mq_try_issue_directly+0x43/0x90\n[ 57.369790] blk_mq_submit_bio+0x4e5/0x5d0\n[ 57.369812] submit_bio_noacct+0x46e/0x4e0\n[ 57.369830] __blkdev_direct_IO_simple+0x1a3/0x2d0\n[ 57.369859] ? set_init_blocksize.isra.0+0x60/0x60\n[ 57.369880] generic_file_read_iter+0x89/0x160\n[ 57.369898] blkdev_read_iter+0x44/0x60\n[ 57.369906] new_sync_read+0x102/0x170\n[ 57.369929] vfs_read+0xd4/0x160\n[ 57.369941] __x64_sys_pread64+0x6e/0xa0\n[ 57.369946] ? lockdep_hardirqs_on+0x79/0x100\n[ 57.369958] do_syscall_64+0x3a/0x70\n[ 57.369965] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 57.369973] RIP: 0033:0x7f7ed4c1399f\n[ 57.369979] Code: 08 89 3c 24 48 89 4c 24 18 e8 7d f3 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 11 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 cd f3 ff ff 48 8b\n[ 57.369983] RSP: 002b:00007ffd7918c580 EFLAGS: 00000293 ORIG_RAX: 0000000000000011\n[ 57.369990] RAX: ffffffffffffffda RBX: 00000000015b4540 RCX: 00007f7ed4c1399f\n[ 57.369993] RDX: 0000000000001000 RSI: 00000000015de000 RDI: 0000000000000009\n[ 57.369996] RBP: 00000000015b4540 R08: 0000000000000000 R09: 0000000000000001\n[ 57.369999] R10: 0000000000e5c000 R11: 0000000000000293 R12: 00007f7eb5269a70\n[ 57.370002] R13: 0000000000000000 R14: 0000000000001000 R15: 00000000015b4568\n[ 57.370031] CPU: 7 PID: 1507 Comm: fio Not tainted 5.13.0-rc1+ #34\n[ 57.370036] Hardware name: System manufacturer System Product Name/PRIME Z270-A, BIOS 1302 03/15/2018\n[ 57.370039] Call Trace:\n[ 57.370045] dump_stack+0x6d/0x89\n[ 57.370056] ch\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47178",
"url": "https://www.suse.com/security/cve/CVE-2021-47178"
},
{
"category": "external",
"summary": "SUSE Bug 1221995 for CVE-2021-47178",
"url": "https://bugzilla.suse.com/1221995"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47178"
},
{
"cve": "CVE-2021-47203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()\n\nWhen parsing the txq list in lpfc_drain_txq(), the driver attempts to pass\nthe requests to the adapter. If such an attempt fails, a local \"fail_msg\"\nstring is set and a log message output. The job is then added to a\ncompletions list for cancellation.\n\nProcessing of any further jobs from the txq list continues, but since\n\"fail_msg\" remains set, jobs are added to the completions list regardless\nof whether a wqe was passed to the adapter. If successfully added to\ntxcmplq, jobs are added to both lists resulting in list corruption.\n\nFix by clearing the fail_msg string after adding a job to the completions\nlist. This stops the subsequent jobs from being added to the completions\nlist unless they had an appropriate failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47203",
"url": "https://www.suse.com/security/cve/CVE-2021-47203"
},
{
"category": "external",
"summary": "SUSE Bug 1222881 for CVE-2021-47203",
"url": "https://bugzilla.suse.com/1222881"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47203"
},
{
"cve": "CVE-2021-47301",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47301"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix use-after-free error during reset\n\nCleans the next descriptor to watch (next_to_watch) when cleaning the\nTX ring.\n\nFailure to do so can cause invalid memory accesses. If igb_poll() runs\nwhile the controller is reset this can lead to the driver try to free\na skb that was already freed.\n\n(The crash is harder to reproduce with the igb driver, but the same\npotential problem exists as the code is identical to igc)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47301",
"url": "https://www.suse.com/security/cve/CVE-2021-47301"
},
{
"category": "external",
"summary": "SUSE Bug 1224916 for CVE-2021-47301",
"url": "https://bugzilla.suse.com/1224916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47301"
},
{
"cve": "CVE-2021-47435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47435"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix mempool NULL pointer race when completing IO\n\ndm_io_dec_pending() calls end_io_acct() first and will then dec md\nin-flight pending count. But if a task is swapping DM table at same\ntime this can result in a crash due to mempool-\u003eelements being NULL:\n\ntask1 task2\ndo_resume\n -\u003edo_suspend\n -\u003edm_wait_for_completion\n bio_endio\n\t\t\t\t -\u003eclone_endio\n\t\t\t\t -\u003edm_io_dec_pending\n\t\t\t\t -\u003eend_io_acct\n\t\t\t\t -\u003ewakeup task1\n -\u003edm_swap_table\n -\u003e__bind\n -\u003e__bind_mempools\n -\u003ebioset_exit\n -\u003emempool_exit\n -\u003efree_io\n\n[ 67.330330] Unable to handle kernel NULL pointer dereference at\nvirtual address 0000000000000000\n......\n[ 67.330494] pstate: 80400085 (Nzcv daIf +PAN -UAO)\n[ 67.330510] pc : mempool_free+0x70/0xa0\n[ 67.330515] lr : mempool_free+0x4c/0xa0\n[ 67.330520] sp : ffffff8008013b20\n[ 67.330524] x29: ffffff8008013b20 x28: 0000000000000004\n[ 67.330530] x27: ffffffa8c2ff40a0 x26: 00000000ffff1cc8\n[ 67.330535] x25: 0000000000000000 x24: ffffffdada34c800\n[ 67.330541] x23: 0000000000000000 x22: ffffffdada34c800\n[ 67.330547] x21: 00000000ffff1cc8 x20: ffffffd9a1304d80\n[ 67.330552] x19: ffffffdada34c970 x18: 000000b312625d9c\n[ 67.330558] x17: 00000000002dcfbf x16: 00000000000006dd\n[ 67.330563] x15: 000000000093b41e x14: 0000000000000010\n[ 67.330569] x13: 0000000000007f7a x12: 0000000034155555\n[ 67.330574] x11: 0000000000000001 x10: 0000000000000001\n[ 67.330579] x9 : 0000000000000000 x8 : 0000000000000000\n[ 67.330585] x7 : 0000000000000000 x6 : ffffff80148b5c1a\n[ 67.330590] x5 : ffffff8008013ae0 x4 : 0000000000000001\n[ 67.330596] x3 : ffffff80080139c8 x2 : ffffff801083bab8\n[ 67.330601] x1 : 0000000000000000 x0 : ffffffdada34c970\n[ 67.330609] Call trace:\n[ 67.330616] mempool_free+0x70/0xa0\n[ 67.330627] bio_put+0xf8/0x110\n[ 67.330638] dec_pending+0x13c/0x230\n[ 67.330644] clone_endio+0x90/0x180\n[ 67.330649] bio_endio+0x198/0x1b8\n[ 67.330655] dec_pending+0x190/0x230\n[ 67.330660] clone_endio+0x90/0x180\n[ 67.330665] bio_endio+0x198/0x1b8\n[ 67.330673] blk_update_request+0x214/0x428\n[ 67.330683] scsi_end_request+0x2c/0x300\n[ 67.330688] scsi_io_completion+0xa0/0x710\n[ 67.330695] scsi_finish_command+0xd8/0x110\n[ 67.330700] scsi_softirq_done+0x114/0x148\n[ 67.330708] blk_done_softirq+0x74/0xd0\n[ 67.330716] __do_softirq+0x18c/0x374\n[ 67.330724] irq_exit+0xb4/0xb8\n[ 67.330732] __handle_domain_irq+0x84/0xc0\n[ 67.330737] gic_handle_irq+0x148/0x1b0\n[ 67.330744] el1_irq+0xe8/0x190\n[ 67.330753] lpm_cpuidle_enter+0x4f8/0x538\n[ 67.330759] cpuidle_enter_state+0x1fc/0x398\n[ 67.330764] cpuidle_enter+0x18/0x20\n[ 67.330772] do_idle+0x1b4/0x290\n[ 67.330778] cpu_startup_entry+0x20/0x28\n[ 67.330786] secondary_start_kernel+0x160/0x170\n\nFix this by:\n1) Establishing pointers to \u0027struct dm_io\u0027 members in\ndm_io_dec_pending() so that they may be passed into end_io_acct()\n_after_ free_io() is called.\n2) Moving end_io_acct() after free_io().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47435",
"url": "https://www.suse.com/security/cve/CVE-2021-47435"
},
{
"category": "external",
"summary": "SUSE Bug 1225247 for CVE-2021-47435",
"url": "https://bugzilla.suse.com/1225247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47435"
},
{
"cve": "CVE-2021-47498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47498"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm rq: don\u0027t queue request to blk-mq during DM suspend\n\nDM uses blk-mq\u0027s quiesce/unquiesce to stop/start device mapper queue.\n\nBut blk-mq\u0027s unquiesce may come from outside events, such as elevator\nswitch, updating nr_requests or others, and request may come during\nsuspend, so simply ask for blk-mq to requeue it.\n\nFixes one kernel panic issue when running updating nr_requests and\ndm-mpath suspend/resume stress test.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47498",
"url": "https://www.suse.com/security/cve/CVE-2021-47498"
},
{
"category": "external",
"summary": "SUSE Bug 1225357 for CVE-2021-47498",
"url": "https://bugzilla.suse.com/1225357"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47498"
},
{
"cve": "CVE-2021-47501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47501"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix NULL pointer dereference in i40e_dbg_dump_desc\n\nWhen trying to dump VFs VSI RX/TX descriptors\nusing debugfs there was a crash\ndue to NULL pointer dereference in i40e_dbg_dump_desc.\nAdded a check to i40e_dbg_dump_desc that checks if\nVSI type is correct for dumping RX/TX descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47501",
"url": "https://www.suse.com/security/cve/CVE-2021-47501"
},
{
"category": "external",
"summary": "SUSE Bug 1225361 for CVE-2021-47501",
"url": "https://bugzilla.suse.com/1225361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47501"
},
{
"cve": "CVE-2021-47544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47544"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: fix page frag corruption on page fault\n\nSteffen reported a TCP stream corruption for HTTP requests\nserved by the apache web-server using a cifs mount-point\nand memory mapping the relevant file.\n\nThe root cause is quite similar to the one addressed by\ncommit 20eb4f29b602 (\"net: fix sk_page_frag() recursion from\nmemory reclaim\"). Here the nested access to the task page frag\nis caused by a page fault on the (mmapped) user-space memory\nbuffer coming from the cifs file.\n\nThe page fault handler performs an smb transaction on a different\nsocket, inside the same process context. Since sk-\u003esk_allaction\nfor such socket does not prevent the usage for the task_frag,\nthe nested allocation modify \"under the hood\" the page frag\nin use by the outer sendmsg call, corrupting the stream.\n\nThe overall relevant stack trace looks like the following:\n\nhttpd 78268 [001] 3461630.850950: probe:tcp_sendmsg_locked:\n ffffffff91461d91 tcp_sendmsg_locked+0x1\n ffffffff91462b57 tcp_sendmsg+0x27\n ffffffff9139814e sock_sendmsg+0x3e\n ffffffffc06dfe1d smb_send_kvec+0x28\n [...]\n ffffffffc06cfaf8 cifs_readpages+0x213\n ffffffff90e83c4b read_pages+0x6b\n ffffffff90e83f31 __do_page_cache_readahead+0x1c1\n ffffffff90e79e98 filemap_fault+0x788\n ffffffff90eb0458 __do_fault+0x38\n ffffffff90eb5280 do_fault+0x1a0\n ffffffff90eb7c84 __handle_mm_fault+0x4d4\n ffffffff90eb8093 handle_mm_fault+0xc3\n ffffffff90c74f6d __do_page_fault+0x1ed\n ffffffff90c75277 do_page_fault+0x37\n ffffffff9160111e page_fault+0x1e\n ffffffff9109e7b5 copyin+0x25\n ffffffff9109eb40 _copy_from_iter_full+0xe0\n ffffffff91462370 tcp_sendmsg_locked+0x5e0\n ffffffff91462370 tcp_sendmsg_locked+0x5e0\n ffffffff91462b57 tcp_sendmsg+0x27\n ffffffff9139815c sock_sendmsg+0x4c\n ffffffff913981f7 sock_write_iter+0x97\n ffffffff90f2cc56 do_iter_readv_writev+0x156\n ffffffff90f2dff0 do_iter_write+0x80\n ffffffff90f2e1c3 vfs_writev+0xa3\n ffffffff90f2e27c do_writev+0x5c\n ffffffff90c042bb do_syscall_64+0x5b\n ffffffff916000ad entry_SYSCALL_64_after_hwframe+0x65\n\nThe cifs filesystem rightfully sets sk_allocations to GFP_NOFS,\nwe can avoid the nesting using the sk page frag for allocation\nlacking the __GFP_FS flag. Do not define an additional mm-helper\nfor that, as this is strictly tied to the sk page frag usage.\n\nv1 -\u003e v2:\n - use a stricted sk_page_frag() check instead of reordering the\n code (Eric)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47544",
"url": "https://www.suse.com/security/cve/CVE-2021-47544"
},
{
"category": "external",
"summary": "SUSE Bug 1225463 for CVE-2021-47544",
"url": "https://bugzilla.suse.com/1225463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47544"
},
{
"cve": "CVE-2021-47556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47556"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()\n\nethtool_set_coalesce() now uses both the .get_coalesce() and\n.set_coalesce() callbacks. But the check for their availability is\nbuggy, so changing the coalesce settings on a device where the driver\nprovides only _one_ of the callbacks results in a NULL pointer\ndereference instead of an -EOPNOTSUPP.\n\nFix the condition so that the availability of both callbacks is\nensured. This also matches the netlink code.\n\nNote that reproducing this requires some effort - it only affects the\nlegacy ioctl path, and needs a specific combination of driver options:\n- have .get_coalesce() and .coalesce_supported but no\n .set_coalesce(), or\n- have .set_coalesce() but no .get_coalesce(). Here eg. ethtool doesn\u0027t\n cause the crash as it first attempts to call ethtool_get_coalesce()\n and bails out on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47556",
"url": "https://www.suse.com/security/cve/CVE-2021-47556"
},
{
"category": "external",
"summary": "SUSE Bug 1225383 for CVE-2021-47556",
"url": "https://bugzilla.suse.com/1225383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47556"
},
{
"cve": "CVE-2021-47590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix deadlock in __mptcp_push_pending()\n\n__mptcp_push_pending() may call mptcp_flush_join_list() with subflow\nsocket lock held. If such call hits mptcp_sockopt_sync_all() then\nsubsequently __mptcp_sockopt_sync() could try to lock the subflow\nsocket for itself, causing a deadlock.\n\nsysrq: Show Blocked State\ntask:ss-server state:D stack: 0 pid: 938 ppid: 1 flags:0x00000000\nCall Trace:\n \u003cTASK\u003e\n __schedule+0x2d6/0x10c0\n ? __mod_memcg_state+0x4d/0x70\n ? csum_partial+0xd/0x20\n ? _raw_spin_lock_irqsave+0x26/0x50\n schedule+0x4e/0xc0\n __lock_sock+0x69/0x90\n ? do_wait_intr_irq+0xa0/0xa0\n __lock_sock_fast+0x35/0x50\n mptcp_sockopt_sync_all+0x38/0xc0\n __mptcp_push_pending+0x105/0x200\n mptcp_sendmsg+0x466/0x490\n sock_sendmsg+0x57/0x60\n __sys_sendto+0xf0/0x160\n ? do_wait_intr_irq+0xa0/0xa0\n ? fpregs_restore_userregs+0x12/0xd0\n __x64_sys_sendto+0x20/0x30\n do_syscall_64+0x38/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\nRIP: 0033:0x7f9ba546c2d0\nRSP: 002b:00007ffdc3b762d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c\nRAX: ffffffffffffffda RBX: 00007f9ba56c8060 RCX: 00007f9ba546c2d0\nRDX: 000000000000077a RSI: 0000000000e5e180 RDI: 0000000000000234\nRBP: 0000000000cc57f0 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 00007f9ba56c8060\nR13: 0000000000b6ba60 R14: 0000000000cc7840 R15: 41d8685b1d7901b8\n \u003c/TASK\u003e\n\nFix the issue by using __mptcp_flush_join_list() instead of plain\nmptcp_flush_join_list() inside __mptcp_push_pending(), as suggested by\nFlorian. The sockopt sync will be deferred to the workqueue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47590",
"url": "https://www.suse.com/security/cve/CVE-2021-47590"
},
{
"category": "external",
"summary": "SUSE Bug 1226565 for CVE-2021-47590",
"url": "https://bugzilla.suse.com/1226565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47590"
},
{
"cve": "CVE-2021-47614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix a user-after-free in add_pble_prm\n\nWhen irdma_hmc_sd_one fails, \u0027chunk\u0027 is freed while its still on the PBLE\ninfo list.\n\nAdd the chunk entry to the PBLE info list only after successful setting of\nthe SD in irdma_hmc_sd_one.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47614",
"url": "https://www.suse.com/security/cve/CVE-2021-47614"
},
{
"category": "external",
"summary": "SUSE Bug 1226601 for CVE-2021-47614",
"url": "https://bugzilla.suse.com/1226601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-47614"
},
{
"cve": "CVE-2022-0001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0001"
}
],
"notes": [
{
"category": "general",
"text": "Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0001",
"url": "https://www.suse.com/security/cve/CVE-2022-0001"
},
{
"category": "external",
"summary": "SUSE Bug 1191580 for CVE-2022-0001",
"url": "https://bugzilla.suse.com/1191580"
},
{
"category": "external",
"summary": "SUSE Bug 1196901 for CVE-2022-0001",
"url": "https://bugzilla.suse.com/1196901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-0001"
},
{
"cve": "CVE-2022-0002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0002"
}
],
"notes": [
{
"category": "general",
"text": "Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0002",
"url": "https://www.suse.com/security/cve/CVE-2022-0002"
},
{
"category": "external",
"summary": "SUSE Bug 1191580 for CVE-2022-0002",
"url": "https://bugzilla.suse.com/1191580"
},
{
"category": "external",
"summary": "SUSE Bug 1196901 for CVE-2022-0002",
"url": "https://bugzilla.suse.com/1196901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-0002"
},
{
"cve": "CVE-2022-0286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0286"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0286",
"url": "https://www.suse.com/security/cve/CVE-2022-0286"
},
{
"category": "external",
"summary": "SUSE Bug 1195371 for CVE-2022-0286",
"url": "https://bugzilla.suse.com/1195371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-0286"
},
{
"cve": "CVE-2022-0322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0322"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0322",
"url": "https://www.suse.com/security/cve/CVE-2022-0322"
},
{
"category": "external",
"summary": "SUSE Bug 1194985 for CVE-2022-0322",
"url": "https://bugzilla.suse.com/1194985"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-0322"
},
{
"cve": "CVE-2022-0850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0850"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0850",
"url": "https://www.suse.com/security/cve/CVE-2022-0850"
},
{
"category": "external",
"summary": "SUSE Bug 1196761 for CVE-2022-0850",
"url": "https://bugzilla.suse.com/1196761"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-0850"
},
{
"cve": "CVE-2022-1011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1011"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1011",
"url": "https://www.suse.com/security/cve/CVE-2022-1011"
},
{
"category": "external",
"summary": "SUSE Bug 1197343 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1197343"
},
{
"category": "external",
"summary": "SUSE Bug 1197344 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1197344"
},
{
"category": "external",
"summary": "SUSE Bug 1198687 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1198687"
},
{
"category": "external",
"summary": "SUSE Bug 1204132 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1204132"
},
{
"category": "external",
"summary": "SUSE Bug 1212322 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1212322"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1011"
},
{
"cve": "CVE-2022-3105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3105"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3105",
"url": "https://www.suse.com/security/cve/CVE-2022-3105"
},
{
"category": "external",
"summary": "SUSE Bug 1206398 for CVE-2022-3105",
"url": "https://bugzilla.suse.com/1206398"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-3105"
},
{
"cve": "CVE-2022-3106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3106"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3106",
"url": "https://www.suse.com/security/cve/CVE-2022-3106"
},
{
"category": "external",
"summary": "SUSE Bug 1206397 for CVE-2022-3106",
"url": "https://bugzilla.suse.com/1206397"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-3106"
},
{
"cve": "CVE-2022-3108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3108"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3108",
"url": "https://www.suse.com/security/cve/CVE-2022-3108"
},
{
"category": "external",
"summary": "SUSE Bug 1206389 for CVE-2022-3108",
"url": "https://bugzilla.suse.com/1206389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-3108"
},
{
"cve": "CVE-2022-48771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-48771"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Fix stale file descriptors on failed usercopy\n\nA failing usercopy of the fence_rep object will lead to a stale entry in\nthe file descriptor table as put_unused_fd() won\u0027t release it. This\nenables userland to refer to a dangling \u0027file\u0027 object through that still\nvalid file descriptor, leading to all kinds of use-after-free\nexploitation scenarios.\n\nFix this by deferring the call to fd_install() until after the usercopy\nhas succeeded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-48771",
"url": "https://www.suse.com/security/cve/CVE-2022-48771"
},
{
"category": "external",
"summary": "SUSE Bug 1226732 for CVE-2022-48771",
"url": "https://bugzilla.suse.com/1226732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-48771"
},
{
"cve": "CVE-2022-48904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-48904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Fix I/O page table memory leak\n\nThe current logic updates the I/O page table mode for the domain\nbefore calling the logic to free memory used for the page table.\nThis results in IOMMU page table memory leak, and can be observed\nwhen launching VM w/ pass-through devices.\n\nFix by freeing the memory used for page table before updating the mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-48904",
"url": "https://www.suse.com/security/cve/CVE-2022-48904"
},
{
"category": "external",
"summary": "SUSE Bug 1229603 for CVE-2022-48904",
"url": "https://bugzilla.suse.com/1229603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-48904"
},
{
"cve": "CVE-2022-49227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: avoid kernel warning when changing RX ring parameters\n\nCalling ethtool changing the RX ring parameters like this:\n\n $ ethtool -G eth0 rx 1024\n\non igc triggers kernel warnings like this:\n\n[ 225.198467] ------------[ cut here ]------------\n[ 225.198473] Missing unregister, handled but fix driver\n[ 225.198485] WARNING: CPU: 7 PID: 959 at net/core/xdp.c:168\nxdp_rxq_info_reg+0x79/0xd0\n[...]\n[ 225.198601] Call Trace:\n[ 225.198604] \u003cTASK\u003e\n[ 225.198609] igc_setup_rx_resources+0x3f/0xe0 [igc]\n[ 225.198617] igc_ethtool_set_ringparam+0x30e/0x450 [igc]\n[ 225.198626] ethnl_set_rings+0x18a/0x250\n[ 225.198631] genl_family_rcv_msg_doit+0xca/0x110\n[ 225.198637] genl_rcv_msg+0xce/0x1c0\n[ 225.198640] ? rings_prepare_data+0x60/0x60\n[ 225.198644] ? genl_get_cmd+0xd0/0xd0\n[ 225.198647] netlink_rcv_skb+0x4e/0xf0\n[ 225.198652] genl_rcv+0x24/0x40\n[ 225.198655] netlink_unicast+0x20e/0x330\n[ 225.198659] netlink_sendmsg+0x23f/0x480\n[ 225.198663] sock_sendmsg+0x5b/0x60\n[ 225.198667] __sys_sendto+0xf0/0x160\n[ 225.198671] ? handle_mm_fault+0xb2/0x280\n[ 225.198676] ? do_user_addr_fault+0x1eb/0x690\n[ 225.198680] __x64_sys_sendto+0x20/0x30\n[ 225.198683] do_syscall_64+0x38/0x90\n[ 225.198687] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 225.198693] RIP: 0033:0x7f7ae38ac3aa\n\nigc_ethtool_set_ringparam() copies the igc_ring structure but neglects to\nreset the xdp_rxq_info member before calling igc_setup_rx_resources().\nThis in turn calls xdp_rxq_info_reg() with an already registered xdp_rxq_info.\n\nMake sure to unregister the xdp_rxq_info structure first in\nigc_setup_rx_resources.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49227",
"url": "https://www.suse.com/security/cve/CVE-2022-49227"
},
{
"category": "external",
"summary": "SUSE Bug 1237786 for CVE-2022-49227",
"url": "https://bugzilla.suse.com/1237786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49227"
},
{
"cve": "CVE-2022-50131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: mcp2221: prevent a buffer overflow in mcp_smbus_write()\n\nSmatch Warning:\ndrivers/hid/hid-mcp2221.c:388 mcp_smbus_write() error: __memcpy()\n\u0027\u0026mcp-\u003etxbuf[5]\u0027 too small (59 vs 255)\ndrivers/hid/hid-mcp2221.c:388 mcp_smbus_write() error: __memcpy() \u0027buf\u0027\ntoo small (34 vs 255)\n\nThe \u0027len\u0027 variable can take a value between 0-255 as it can come from\ndata-\u003eblock[0] and it is user data. So add an bound check to prevent a\nbuffer overflow in memcpy().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50131",
"url": "https://www.suse.com/security/cve/CVE-2022-50131"
},
{
"category": "external",
"summary": "SUSE Bug 1244807 for CVE-2022-50131",
"url": "https://bugzilla.suse.com/1244807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50131"
},
{
"cve": "CVE-2022-50475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50475"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Make sure \"ib_port\" is valid when access sysfs node\n\nThe \"ib_port\" structure must be set before adding the sysfs kobject,\nand reset after removing it, otherwise it may crash when accessing\nthe sysfs node:\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050\n Mem abort info:\n ESR = 0x96000006\n Exception class = DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n Data abort info:\n ISV = 0, ISS = 0x00000006\n CM = 0, WnR = 0\n user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000e85f5ba5\n [0000000000000050] pgd=0000000848fd9003, pud=000000085b387003, pmd=0000000000000000\n Internal error: Oops: 96000006 [#2] PREEMPT SMP\n Modules linked in: ib_umad(O) mlx5_ib(O) nfnetlink_cttimeout(E) nfnetlink(E) act_gact(E) cls_flower(E) sch_ingress(E) openvswitch(E) nsh(E) nf_nat_ipv6(E) nf_nat_ipv4(E) nf_conncount(E) nf_nat(E) nf_conntrack(E) nf_defrag_ipv6(E) nf_defrag_ipv4(E) mst_pciconf(O) ipmi_devintf(E) ipmi_msghandler(E) ipmb_dev_int(OE) mlx5_core(O) mlxfw(O) mlxdevm(O) auxiliary(O) ib_uverbs(O) ib_core(O) mlx_compat(O) psample(E) sbsa_gwdt(E) uio_pdrv_genirq(E) uio(E) mlxbf_pmc(OE) mlxbf_gige(OE) mlxbf_tmfifo(OE) gpio_mlxbf2(OE) pwr_mlxbf(OE) mlx_trio(OE) i2c_mlxbf(OE) mlx_bootctl(OE) bluefield_edac(OE) knem(O) ip_tables(E) ipv6(E) crc_ccitt(E) [last unloaded: mst_pci]\n Process grep (pid: 3372, stack limit = 0x0000000022055c92)\n CPU: 5 PID: 3372 Comm: grep Tainted: G D OE 4.19.161-mlnx.47.gadcd9e3 #1\n Hardware name: https://www.mellanox.com BlueField SoC/BlueField SoC, BIOS BlueField:3.9.2-15-ga2403ab Sep 8 2022\n pstate: 40000005 (nZcv daif -PAN -UAO)\n pc : hw_stat_port_show+0x4c/0x80 [ib_core]\n lr : port_attr_show+0x40/0x58 [ib_core]\n sp : ffff000029f43b50\n x29: ffff000029f43b50 x28: 0000000019375000\n x27: ffff8007b821a540 x26: ffff000029f43e30\n x25: 0000000000008000 x24: ffff000000eaa958\n x23: 0000000000001000 x22: ffff8007a4ce3000\n x21: ffff8007baff8000 x20: ffff8007b9066ac0\n x19: ffff8007bae97578 x18: 0000000000000000\n x17: 0000000000000000 x16: 0000000000000000\n x15: 0000000000000000 x14: 0000000000000000\n x13: 0000000000000000 x12: 0000000000000000\n x11: 0000000000000000 x10: 0000000000000000\n x9 : 0000000000000000 x8 : ffff8007a4ce4000\n x7 : 0000000000000000 x6 : 000000000000003f\n x5 : ffff000000e6a280 x4 : ffff8007a4ce3000\n x3 : 0000000000000000 x2 : aaaaaaaaaaaaaaab\n x1 : ffff8007b9066a10 x0 : ffff8007baff8000\n Call trace:\n hw_stat_port_show+0x4c/0x80 [ib_core]\n port_attr_show+0x40/0x58 [ib_core]\n sysfs_kf_seq_show+0x8c/0x150\n kernfs_seq_show+0x44/0x50\n seq_read+0x1b4/0x45c\n kernfs_fop_read+0x148/0x1d8\n __vfs_read+0x58/0x180\n vfs_read+0x94/0x154\n ksys_read+0x68/0xd8\n __arm64_sys_read+0x28/0x34\n el0_svc_common+0x88/0x18c\n el0_svc_handler+0x78/0x94\n el0_svc+0x8/0xe8\n Code: f2955562 aa1603e4 aa1503e0 f9405683 (f9402861)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50475",
"url": "https://www.suse.com/security/cve/CVE-2022-50475"
},
{
"category": "external",
"summary": "SUSE Bug 1251104 for CVE-2022-50475",
"url": "https://bugzilla.suse.com/1251104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50475"
},
{
"cve": "CVE-2022-50510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50510"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()\n\narm_smmu_pmu_init() won\u0027t remove the callback added by\ncpuhp_setup_state_multi() when platform_driver_register() failed. Remove\nthe callback by cpuhp_remove_multi_state() in fail path.\n\nSimilar to the handling of arm_ccn_init() in commit 26242b330093 (\"bus:\narm-ccn: Prevent hotplug callback leak\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50510",
"url": "https://www.suse.com/security/cve/CVE-2022-50510"
},
{
"category": "external",
"summary": "SUSE Bug 1251525 for CVE-2022-50510",
"url": "https://bugzilla.suse.com/1251525"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50510"
},
{
"cve": "CVE-2022-50536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50536"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix repeated calls to sock_put() when msg has more_data\n\nIn tcp_bpf_send_verdict() redirection, the eval variable is assigned to\n__SK_REDIRECT after the apply_bytes data is sent, if msg has more_data,\nsock_put() will be called multiple times.\n\nWe should reset the eval variable to __SK_NONE every time more_data\nstarts.\n\nThis causes:\n\nIPv4: Attempt to release TCP socket in state 1 00000000b4c925d7\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 5 PID: 4482 at lib/refcount.c:25 refcount_warn_saturate+0x7d/0x110\nModules linked in:\nCPU: 5 PID: 4482 Comm: sockhash_bypass Kdump: loaded Not tainted 6.0.0 #1\nHardware name: Red Hat KVM, BIOS 1.11.0-2.el7 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __tcp_transmit_skb+0xa1b/0xb90\n ? __alloc_skb+0x8c/0x1a0\n ? __kmalloc_node_track_caller+0x184/0x320\n tcp_write_xmit+0x22a/0x1110\n __tcp_push_pending_frames+0x32/0xf0\n do_tcp_sendpages+0x62d/0x640\n tcp_bpf_push+0xae/0x2c0\n tcp_bpf_sendmsg_redir+0x260/0x410\n ? preempt_count_add+0x70/0xa0\n tcp_bpf_send_verdict+0x386/0x4b0\n tcp_bpf_sendmsg+0x21b/0x3b0\n sock_sendmsg+0x58/0x70\n __sys_sendto+0xfa/0x170\n ? xfd_validate_state+0x1d/0x80\n ? switch_fpu_return+0x59/0xe0\n __x64_sys_sendto+0x24/0x30\n do_syscall_64+0x37/0x90\n entry_SYSCALL_64_after_hwframe+0x63/0xcd",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50536",
"url": "https://www.suse.com/security/cve/CVE-2022-50536"
},
{
"category": "external",
"summary": "SUSE Bug 1251293 for CVE-2022-50536",
"url": "https://bugzilla.suse.com/1251293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50536"
},
{
"cve": "CVE-2023-0459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0459"
}
],
"notes": [
{
"category": "general",
"text": "Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the \"access_ok\" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0459",
"url": "https://www.suse.com/security/cve/CVE-2023-0459"
},
{
"category": "external",
"summary": "SUSE Bug 1211738 for CVE-2023-0459",
"url": "https://bugzilla.suse.com/1211738"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2023-0459",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-0459"
},
{
"cve": "CVE-2023-53570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()\n\nnl80211_parse_mbssid_elems() uses a u8 variable num_elems to count the\nnumber of MBSSID elements in the nested netlink attribute attrs, which can\nlead to an integer overflow if a user of the nl80211 interface specifies\n256 or more elements in the corresponding attribute in userspace. The\ninteger overflow can lead to a heap buffer overflow as num_elems determines\nthe size of the trailing array in elems, and this array is thereafter\nwritten to for each element in attrs.\n\nNote that this vulnerability only affects devices with the\nwiphy-\u003embssid_max_interfaces member set for the wireless physical device\nstruct in the device driver, and can only be triggered by a process with\nCAP_NET_ADMIN capabilities.\n\nFix this by checking for a maximum of 255 elements in attrs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53570",
"url": "https://www.suse.com/security/cve/CVE-2023-53570"
},
{
"category": "external",
"summary": "SUSE Bug 1251031 for CVE-2023-53570",
"url": "https://bugzilla.suse.com/1251031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53570"
},
{
"cve": "CVE-2023-53649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf trace: Really free the evsel-\u003epriv area\n\nIn 3cb4d5e00e037c70 (\"perf trace: Free syscall tp fields in\nevsel-\u003epriv\") it only was freeing if strcmp(evsel-\u003etp_format-\u003esystem,\n\"syscalls\") returned zero, while the corresponding initialization of\nevsel-\u003epriv was being performed if it was _not_ zero, i.e. if the tp\nsystem wasn\u0027t \u0027syscalls\u0027.\n\nJust stop looking for that and free it if evsel-\u003epriv was set, which\nshould be equivalent.\n\nAlso use the pre-existing evsel_trace__delete() function.\n\nThis resolves these leaks, detected with:\n\n $ make EXTRA_CFLAGS=\"-fsanitize=address\" BUILD_BPF_SKEL=1 CORESIGHT=1 O=/tmp/build/perf-tools-next -C tools/perf install-bin\n\n =================================================================\n ==481565==ERROR: LeakSanitizer: detected memory leaks\n\n Direct leak of 40 byte(s) in 1 object(s) allocated from:\n #0 0x7f7343cba097 in calloc (/lib64/libasan.so.8+0xba097)\n #1 0x987966 in zalloc (/home/acme/bin/perf+0x987966)\n #2 0x52f9b9 in evsel_trace__new /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:307\n #3 0x52f9b9 in evsel__syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:333\n #4 0x52f9b9 in evsel__init_raw_syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:458\n #5 0x52f9b9 in perf_evsel__raw_syscall_newtp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:480\n #6 0x540e8b in trace__add_syscall_newtp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:3212\n #7 0x540e8b in trace__run /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:3891\n #8 0x540e8b in cmd_trace /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:5156\n #9 0x5ef262 in run_builtin /home/acme/git/perf-tools-next/tools/perf/perf.c:323\n #10 0x4196da in handle_internal_command /home/acme/git/perf-tools-next/tools/perf/perf.c:377\n #11 0x4196da in run_argv /home/acme/git/perf-tools-next/tools/perf/perf.c:421\n #12 0x4196da in main /home/acme/git/perf-tools-next/tools/perf/perf.c:537\n #13 0x7f7342c4a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f)\n\n Direct leak of 40 byte(s) in 1 object(s) allocated from:\n #0 0x7f7343cba097 in calloc (/lib64/libasan.so.8+0xba097)\n #1 0x987966 in zalloc (/home/acme/bin/perf+0x987966)\n #2 0x52f9b9 in evsel_trace__new /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:307\n #3 0x52f9b9 in evsel__syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:333\n #4 0x52f9b9 in evsel__init_raw_syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:458\n #5 0x52f9b9 in perf_evsel__raw_syscall_newtp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:480\n #6 0x540dd1 in trace__add_syscall_newtp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:3205\n #7 0x540dd1 in trace__run /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:3891\n #8 0x540dd1 in cmd_trace /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:5156\n #9 0x5ef262 in run_builtin /home/acme/git/perf-tools-next/tools/perf/perf.c:323\n #10 0x4196da in handle_internal_command /home/acme/git/perf-tools-next/tools/perf/perf.c:377\n #11 0x4196da in run_argv /home/acme/git/perf-tools-next/tools/perf/perf.c:421\n #12 0x4196da in main /home/acme/git/perf-tools-next/tools/perf/perf.c:537\n #13 0x7f7342c4a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f)\n\n SUMMARY: AddressSanitizer: 80 byte(s) leaked in 2 allocation(s).\n [root@quaco ~]#\n\nWith this we plug all leaks with \"perf trace sleep 1\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53649",
"url": "https://www.suse.com/security/cve/CVE-2023-53649"
},
{
"category": "external",
"summary": "SUSE Bug 1251749 for CVE-2023-53649",
"url": "https://bugzilla.suse.com/1251749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-372.9.1.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-372.9.1.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-372.9.1.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-05-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53649"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…