RHSA-2022:7110
Vulnerability from csaf_opensuse - Published: 2022-10-25 00:00 - Updated: 2026-09-20 11:23Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2022:7110.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2022:7110.
Patchnames: RHSA-2022:7110
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.2 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-0494
Threats
Impact
moderate
References
53 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2022:7110.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:7110.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2022:7110",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_7110.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0494 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1353 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23816 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23825 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2588 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-28693 page",
"url": "https://www.suse.com/security/cve/CVE-2022-28693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29900 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29901 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49610 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49611 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50053 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50054 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50055 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50055/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:23:27Z",
"generator": {
"date": "2022-10-25T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2022:7110",
"initial_release_date": "2022-10-25T00:00:00Z",
"revision_history": [
{
"date": "2022-10-25T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:23:27Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-372.32.1.el8_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"product_id": "kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-372.32.1.el8_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-372.32.1.el8_6?arch=x86_64\u0026upstream=bpftool-0:4.18.0-372.32.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-372.32.1.el8_6?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-372.32.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-372.32.1.el8_6?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-372.32.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-372.32.1.el8_6?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-372.32.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-372.32.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "perf-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "perf-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-372.32.1.el8_6?arch=x86_64\u0026upstream=perf-0:4.18.0-372.32.1.el8_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-372.32.1.el8_6.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-372.32.1.el8_6.x86_64",
"product_id": "python3-perf-0:4.18.0-372.32.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-372.32.1.el8_6?arch=x86_64\u0026upstream=perf-0:4.18.0-372.32.1.el8_6.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-372.32.1.el8_6.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "perf-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-372.32.1.el8_6.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-372.32.1.el8_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-0494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0494"
}
],
"notes": [
{
"category": "general",
"text": "A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0494",
"url": "https://www.suse.com/security/cve/CVE-2022-0494"
},
{
"category": "external",
"summary": "SUSE Bug 1197386 for CVE-2022-0494",
"url": "https://bugzilla.suse.com/1197386"
},
{
"category": "external",
"summary": "SUSE Bug 1207783 for CVE-2022-0494",
"url": "https://bugzilla.suse.com/1207783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-0494"
},
{
"cve": "CVE-2022-1353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1353"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1353",
"url": "https://www.suse.com/security/cve/CVE-2022-1353"
},
{
"category": "external",
"summary": "SUSE Bug 1198516 for CVE-2022-1353",
"url": "https://bugzilla.suse.com/1198516"
},
{
"category": "external",
"summary": "SUSE Bug 1212293 for CVE-2022-1353",
"url": "https://bugzilla.suse.com/1212293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-1353"
},
{
"cve": "CVE-2022-23816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23816"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23816",
"url": "https://www.suse.com/security/cve/CVE-2022-23816"
},
{
"category": "external",
"summary": "SUSE Bug 1201456 for CVE-2022-23816",
"url": "https://bugzilla.suse.com/1201456"
},
{
"category": "external",
"summary": "SUSE Bug 1201469 for CVE-2022-23816",
"url": "https://bugzilla.suse.com/1201469"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-23816"
},
{
"cve": "CVE-2022-23825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23825"
}
],
"notes": [
{
"category": "general",
"text": "Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23825",
"url": "https://www.suse.com/security/cve/CVE-2022-23825"
},
{
"category": "external",
"summary": "SUSE Bug 1201457 for CVE-2022-23825",
"url": "https://bugzilla.suse.com/1201457"
},
{
"category": "external",
"summary": "SUSE Bug 1201469 for CVE-2022-23825",
"url": "https://bugzilla.suse.com/1201469"
},
{
"category": "external",
"summary": "SUSE Bug 1205209 for CVE-2022-23825",
"url": "https://bugzilla.suse.com/1205209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-23825"
},
{
"cve": "CVE-2022-2588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2588"
}
],
"notes": [
{
"category": "general",
"text": "It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2588",
"url": "https://www.suse.com/security/cve/CVE-2022-2588"
},
{
"category": "external",
"summary": "SUSE Bug 1202096 for CVE-2022-2588",
"url": "https://bugzilla.suse.com/1202096"
},
{
"category": "external",
"summary": "SUSE Bug 1203613 for CVE-2022-2588",
"url": "https://bugzilla.suse.com/1203613"
},
{
"category": "external",
"summary": "SUSE Bug 1204183 for CVE-2022-2588",
"url": "https://bugzilla.suse.com/1204183"
},
{
"category": "external",
"summary": "SUSE Bug 1209225 for CVE-2022-2588",
"url": "https://bugzilla.suse.com/1209225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2588"
},
{
"cve": "CVE-2022-28693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-28693"
}
],
"notes": [
{
"category": "general",
"text": "Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-28693",
"url": "https://www.suse.com/security/cve/CVE-2022-28693"
},
{
"category": "external",
"summary": "SUSE Bug 1201455 for CVE-2022-28693",
"url": "https://bugzilla.suse.com/1201455"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-28693"
},
{
"cve": "CVE-2022-29900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29900"
}
],
"notes": [
{
"category": "general",
"text": "Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29900",
"url": "https://www.suse.com/security/cve/CVE-2022-29900"
},
{
"category": "external",
"summary": "SUSE Bug 1199657 for CVE-2022-29900",
"url": "https://bugzilla.suse.com/1199657"
},
{
"category": "external",
"summary": "SUSE Bug 1201469 for CVE-2022-29900",
"url": "https://bugzilla.suse.com/1201469"
},
{
"category": "external",
"summary": "SUSE Bug 1207894 for CVE-2022-29900",
"url": "https://bugzilla.suse.com/1207894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-29900"
},
{
"cve": "CVE-2022-29901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29901"
}
],
"notes": [
{
"category": "general",
"text": "Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29901",
"url": "https://www.suse.com/security/cve/CVE-2022-29901"
},
{
"category": "external",
"summary": "SUSE Bug 1199657 for CVE-2022-29901",
"url": "https://bugzilla.suse.com/1199657"
},
{
"category": "external",
"summary": "SUSE Bug 1201469 for CVE-2022-29901",
"url": "https://bugzilla.suse.com/1201469"
},
{
"category": "external",
"summary": "SUSE Bug 1207894 for CVE-2022-29901",
"url": "https://bugzilla.suse.com/1207894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-29901"
},
{
"cve": "CVE-2022-49610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49610"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: VMX: Prevent RSB underflow before vmenter\n\nOn VMX, there are some balanced returns between the time the guest\u0027s\nSPEC_CTRL value is written, and the vmenter.\n\nBalanced returns (matched by a preceding call) are usually ok, but it\u0027s\nat least theoretically possible an NMI with a deep call stack could\nempty the RSB before one of the returns.\n\nFor maximum paranoia, don\u0027t allow *any* returns (balanced or otherwise)\nbetween the SPEC_CTRL write and the vmenter.\n\n [ bp: Fix 32-bit build. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49610",
"url": "https://www.suse.com/security/cve/CVE-2022-49610"
},
{
"category": "external",
"summary": "SUSE Bug 1238952 for CVE-2022-49610",
"url": "https://bugzilla.suse.com/1238952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49610"
},
{
"cve": "CVE-2022-49611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/speculation: Fill RSB on vmexit for IBRS\n\nPrevent RSB underflow/poisoning attacks with RSB. While at it, add a\nbunch of comments to attempt to document the current state of tribal\nknowledge about RSB attacks and what exactly is being mitigated.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49611",
"url": "https://www.suse.com/security/cve/CVE-2022-49611"
},
{
"category": "external",
"summary": "SUSE Bug 1238618 for CVE-2022-49611",
"url": "https://bugzilla.suse.com/1238618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49611"
},
{
"cve": "CVE-2022-50053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50053"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix reset error handling\n\nDo not call iavf_close in iavf_reset_task error handling. Doing so can\nlead to double call of napi_disable, which can lead to deadlock there.\nRemoving VF would lead to iavf_remove task being stuck, because it\nrequires crit_lock, which is held by iavf_close.\nCall iavf_disable_vf if reset fail, so that driver will clean up\nremaining invalid resources.\nDuring rapid VF resets, HW can fail to setup VF mailbox. Wrong\nerror handling can lead to iavf_remove being stuck with:\n[ 5218.999087] iavf 0000:82:01.0: Failed to init adminq: -53\n...\n[ 5267.189211] INFO: task repro.sh:11219 blocked for more than 30 seconds.\n[ 5267.189520] Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 5267.189764] \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[ 5267.190062] task:repro.sh state:D stack: 0 pid:11219 ppid: 8162 flags:0x00000000\n[ 5267.190347] Call Trace:\n[ 5267.190647] \u003cTASK\u003e\n[ 5267.190927] __schedule+0x460/0x9f0\n[ 5267.191264] schedule+0x44/0xb0\n[ 5267.191563] schedule_preempt_disabled+0x14/0x20\n[ 5267.191890] __mutex_lock.isra.12+0x6e3/0xac0\n[ 5267.192237] ? iavf_remove+0xf9/0x6c0 [iavf]\n[ 5267.192565] iavf_remove+0x12a/0x6c0 [iavf]\n[ 5267.192911] ? _raw_spin_unlock_irqrestore+0x1e/0x40\n[ 5267.193285] pci_device_remove+0x36/0xb0\n[ 5267.193619] device_release_driver_internal+0xc1/0x150\n[ 5267.193974] pci_stop_bus_device+0x69/0x90\n[ 5267.194361] pci_stop_and_remove_bus_device+0xe/0x20\n[ 5267.194735] pci_iov_remove_virtfn+0xba/0x120\n[ 5267.195130] sriov_disable+0x2f/0xe0\n[ 5267.195506] ice_free_vfs+0x7d/0x2f0 [ice]\n[ 5267.196056] ? pci_get_device+0x4f/0x70\n[ 5267.196496] ice_sriov_configure+0x78/0x1a0 [ice]\n[ 5267.196995] sriov_numvfs_store+0xfe/0x140\n[ 5267.197466] kernfs_fop_write_iter+0x12e/0x1c0\n[ 5267.197918] new_sync_write+0x10c/0x190\n[ 5267.198404] vfs_write+0x24e/0x2d0\n[ 5267.198886] ksys_write+0x5c/0xd0\n[ 5267.199367] do_syscall_64+0x3a/0x80\n[ 5267.199827] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n[ 5267.200317] RIP: 0033:0x7f5b381205c8\n[ 5267.200814] RSP: 002b:00007fff8c7e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\n[ 5267.201981] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5b381205c8\n[ 5267.202620] RDX: 0000000000000002 RSI: 00005569420ee900 RDI: 0000000000000001\n[ 5267.203426] RBP: 00005569420ee900 R08: 000000000000000a R09: 00007f5b38180820\n[ 5267.204327] R10: 000000000000000a R11: 0000000000000246 R12: 00007f5b383c06e0\n[ 5267.205193] R13: 0000000000000002 R14: 00007f5b383bb880 R15: 0000000000000002\n[ 5267.206041] \u003c/TASK\u003e\n[ 5267.206970] Kernel panic - not syncing: hung_task: blocked tasks\n[ 5267.207809] CPU: 48 PID: 551 Comm: khungtaskd Kdump: loaded Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 5267.208726] Hardware name: Dell Inc. PowerEdge R730/0WCJNT, BIOS 2.11.0 11/02/2019\n[ 5267.209623] Call Trace:\n[ 5267.210569] \u003cTASK\u003e\n[ 5267.211480] dump_stack_lvl+0x33/0x42\n[ 5267.212472] panic+0x107/0x294\n[ 5267.213467] watchdog.cold.8+0xc/0xbb\n[ 5267.214413] ? proc_dohung_task_timeout_secs+0x30/0x30\n[ 5267.215511] kthread+0xf4/0x120\n[ 5267.216459] ? kthread_complete_and_exit+0x20/0x20\n[ 5267.217505] ret_from_fork+0x22/0x30\n[ 5267.218459] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50053",
"url": "https://www.suse.com/security/cve/CVE-2022-50053"
},
{
"category": "external",
"summary": "SUSE Bug 1245038 for CVE-2022-50053",
"url": "https://bugzilla.suse.com/1245038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50053"
},
{
"cve": "CVE-2022-50054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50054"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix NULL pointer dereference in iavf_get_link_ksettings\n\nFix possible NULL pointer dereference, due to freeing of adapter-\u003evf_res\nin iavf_init_get_resources. Previous commit introduced a regression,\nwhere receiving IAVF_ERR_ADMIN_QUEUE_NO_WORK from iavf_get_vf_config\nwould free adapter-\u003evf_res. However, netdev is still registered, so\nethtool_ops can be called. Calling iavf_get_link_ksettings with no vf_res,\nwill result with:\n[ 9385.242676] BUG: kernel NULL pointer dereference, address: 0000000000000008\n[ 9385.242683] #PF: supervisor read access in kernel mode\n[ 9385.242686] #PF: error_code(0x0000) - not-present page\n[ 9385.242690] PGD 0 P4D 0\n[ 9385.242696] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI\n[ 9385.242701] CPU: 6 PID: 3217 Comm: pmdalinux Kdump: loaded Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 9385.242708] Hardware name: Dell Inc. PowerEdge R730/0WCJNT, BIOS 2.11.0 11/02/2019\n[ 9385.242710] RIP: 0010:iavf_get_link_ksettings+0x29/0xd0 [iavf]\n[ 9385.242745] Code: 00 0f 1f 44 00 00 b8 01 ef ff ff 48 c7 46 30 00 00 00 00 48 c7 46 38 00 00 00 00 c6 46 0b 00 66 89 46 08 48 8b 87 68 0e 00 00 \u003cf6\u003e 40 08 80 75 50 8b 87 5c 0e 00 00 83 f8 08 74 7a 76 1d 83 f8 20\n[ 9385.242749] RSP: 0018:ffffc0560ec7fbd0 EFLAGS: 00010246\n[ 9385.242755] RAX: 0000000000000000 RBX: ffffc0560ec7fc08 RCX: 0000000000000000\n[ 9385.242759] RDX: ffffffffc0ad4550 RSI: ffffc0560ec7fc08 RDI: ffffa0fc66674000\n[ 9385.242762] RBP: 00007ffd1fb2bf50 R08: b6a2d54b892363ee R09: ffffa101dc14fb00\n[ 9385.242765] R10: 0000000000000000 R11: 0000000000000004 R12: ffffa0fc66674000\n[ 9385.242768] R13: 0000000000000000 R14: ffffa0fc66674000 R15: 00000000ffffffa1\n[ 9385.242771] FS: 00007f93711a2980(0000) GS:ffffa0fad72c0000(0000) knlGS:0000000000000000\n[ 9385.242775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 9385.242778] CR2: 0000000000000008 CR3: 0000000a8e61c003 CR4: 00000000003706e0\n[ 9385.242781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 9385.242784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 9385.242787] Call Trace:\n[ 9385.242791] \u003cTASK\u003e\n[ 9385.242793] ethtool_get_settings+0x71/0x1a0\n[ 9385.242814] __dev_ethtool+0x426/0x2f40\n[ 9385.242823] ? slab_post_alloc_hook+0x4f/0x280\n[ 9385.242836] ? kmem_cache_alloc_trace+0x15d/0x2f0\n[ 9385.242841] ? dev_ethtool+0x59/0x170\n[ 9385.242848] dev_ethtool+0xa7/0x170\n[ 9385.242856] dev_ioctl+0xc3/0x520\n[ 9385.242866] sock_do_ioctl+0xa0/0xe0\n[ 9385.242877] sock_ioctl+0x22f/0x320\n[ 9385.242885] __x64_sys_ioctl+0x84/0xc0\n[ 9385.242896] do_syscall_64+0x3a/0x80\n[ 9385.242904] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n[ 9385.242918] RIP: 0033:0x7f93702396db\n[ 9385.242923] Code: 73 01 c3 48 8b 0d ad 57 38 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d 57 38 00 f7 d8 64 89 01 48\n[ 9385.242927] RSP: 002b:00007ffd1fb2bf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n[ 9385.242932] RAX: ffffffffffffffda RBX: 000055671b1d2fe0 RCX: 00007f93702396db\n[ 9385.242935] RDX: 00007ffd1fb2bf20 RSI: 0000000000008946 RDI: 0000000000000007\n[ 9385.242937] RBP: 00007ffd1fb2bf20 R08: 0000000000000003 R09: 0030763066307330\n[ 9385.242940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1fb2bf80\n[ 9385.242942] R13: 0000000000000007 R14: 0000556719f6de90 R15: 00007ffd1fb2c1b0\n[ 9385.242948] \u003c/TASK\u003e\n[ 9385.242949] Modules linked in: iavf(E) xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nft_compat nf_nat_tftp nft_objref nf_conntrack_tftp bridge stp llc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables rfkill nfnetlink vfat fat irdma ib_uverbs ib_core intel_rapl_msr intel_rapl_common sb_edac x86_pkg_temp_thermal intel_powerclamp coretem\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50054",
"url": "https://www.suse.com/security/cve/CVE-2022-50054"
},
{
"category": "external",
"summary": "SUSE Bug 1245040 for CVE-2022-50054",
"url": "https://bugzilla.suse.com/1245040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50054"
},
{
"cve": "CVE-2022-50055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50055"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix adminq error handling\n\niavf_alloc_asq_bufs/iavf_alloc_arq_bufs allocates with dma_alloc_coherent\nmemory for VF mailbox.\nFree DMA regions for both ASQ and ARQ in case error happens during\nconfiguration of ASQ/ARQ registers.\nWithout this change it is possible to see when unloading interface:\n74626.583369: dma_debug_device_change: device driver has pending DMA allocations while released from device [count=32]\nOne of leaked entries details: [device address=0x0000000b27ff9000] [size=4096 bytes] [mapped with DMA_BIDIRECTIONAL] [mapped as coherent]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50055",
"url": "https://www.suse.com/security/cve/CVE-2022-50055"
},
{
"category": "external",
"summary": "SUSE Bug 1245039 for CVE-2022-50055",
"url": "https://bugzilla.suse.com/1245039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-372.32.1.el8_6.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-372.32.1.el8_6.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-372.32.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50055"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…