RHSA-2023:0832
Vulnerability from csaf_opensuse - Published: 2023-02-21 00:00 - Updated: 2026-09-20 11:26Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2023:0832.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2023:0832.
Patchnames: RHSA-2023:0832
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.2 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2022-2873
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2022-2873
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2022-2873
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-2873
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-2873
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2022-2873
Threats
Impact
important
References
33 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2023:0832.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2023:0832.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2023:0832",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_0832.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2873 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-41222 page",
"url": "https://www.suse.com/security/cve/CVE-2022-41222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-43945 page",
"url": "https://www.suse.com/security/cve/CVE-2022-43945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50235 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50410 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50482 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50487 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50487/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:26:31Z",
"generator": {
"date": "2023-02-21T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2023:0832",
"initial_release_date": "2023-02-21T00:00:00Z",
"revision_history": [
{
"date": "2023-02-21T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:26:31Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-425.13.1.el8_7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"product_id": "kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-425.13.1.el8_7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-425.13.1.el8_7?arch=x86_64\u0026upstream=bpftool-0:4.18.0-425.13.1.el8_7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-425.13.1.el8_7?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-425.13.1.el8_7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-425.13.1.el8_7?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-425.13.1.el8_7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-425.13.1.el8_7?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-425.13.1.el8_7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-425.13.1.el8_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "perf-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "perf-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-425.13.1.el8_7?arch=x86_64\u0026upstream=perf-0:4.18.0-425.13.1.el8_7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-425.13.1.el8_7.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-425.13.1.el8_7.x86_64",
"product_id": "python3-perf-0:4.18.0-425.13.1.el8_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-425.13.1.el8_7?arch=x86_64\u0026upstream=perf-0:4.18.0-425.13.1.el8_7.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-425.13.1.el8_7.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "perf-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-425.13.1.el8_7.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-425.13.1.el8_7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-2873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2873"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds memory access flaw was found in the Linux kernel Intel\u0027s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2873",
"url": "https://www.suse.com/security/cve/CVE-2022-2873"
},
{
"category": "external",
"summary": "SUSE Bug 1202558 for CVE-2022-2873",
"url": "https://bugzilla.suse.com/1202558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-2873"
},
{
"cve": "CVE-2022-41222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-41222"
}
],
"notes": [
{
"category": "general",
"text": "mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-41222",
"url": "https://www.suse.com/security/cve/CVE-2022-41222"
},
{
"category": "external",
"summary": "SUSE Bug 1203622 for CVE-2022-41222",
"url": "https://bugzilla.suse.com/1203622"
},
{
"category": "external",
"summary": "SUSE Bug 1203624 for CVE-2022-41222",
"url": "https://bugzilla.suse.com/1203624"
},
{
"category": "external",
"summary": "SUSE Bug 1209225 for CVE-2022-41222",
"url": "https://bugzilla.suse.com/1209225"
},
{
"category": "external",
"summary": "SUSE Bug 1209476 for CVE-2022-41222",
"url": "https://bugzilla.suse.com/1209476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-41222"
},
{
"cve": "CVE-2022-43945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-43945"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-43945",
"url": "https://www.suse.com/security/cve/CVE-2022-43945"
},
{
"category": "external",
"summary": "SUSE Bug 1205128 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1205128"
},
{
"category": "external",
"summary": "SUSE Bug 1205130 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1205130"
},
{
"category": "external",
"summary": "SUSE Bug 1208030 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1208030"
},
{
"category": "external",
"summary": "SUSE Bug 1208085 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1208085"
},
{
"category": "external",
"summary": "SUSE Bug 1209225 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1209225"
},
{
"category": "external",
"summary": "SUSE Bug 1210124 for CVE-2022-43945",
"url": "https://bugzilla.suse.com/1210124"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-43945"
},
{
"cve": "CVE-2022-50235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50235"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Protect against send buffer overflow in NFSv2 READDIR\n\nRestore the previous limit on the @count argument to prevent a\nbuffer overflow attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50235",
"url": "https://www.suse.com/security/cve/CVE-2022-50235"
},
{
"category": "external",
"summary": "SUSE Bug 1249667 for CVE-2022-50235",
"url": "https://bugzilla.suse.com/1249667"
},
{
"category": "external",
"summary": "SUSE Bug 1249668 for CVE-2022-50235",
"url": "https://bugzilla.suse.com/1249668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-50235"
},
{
"cve": "CVE-2022-50410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50410"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Protect against send buffer overflow in NFSv2 READ\n\nSince before the git era, NFSD has conserved the number of pages\nheld by each nfsd thread by combining the RPC receive and send\nbuffers into a single array of pages. This works because there are\nno cases where an operation needs a large RPC Call message and a\nlarge RPC Reply at the same time.\n\nOnce an RPC Call has been received, svc_process() updates\nsvc_rqst::rq_res to describe the part of rq_pages that can be\nused for constructing the Reply. This means that the send buffer\n(rq_res) shrinks when the received RPC record containing the RPC\nCall is large.\n\nA client can force this shrinkage on TCP by sending a correctly-\nformed RPC Call header contained in an RPC record that is\nexcessively large. The full maximum payload size cannot be\nconstructed in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50410",
"url": "https://www.suse.com/security/cve/CVE-2022-50410"
},
{
"category": "external",
"summary": "SUSE Bug 1250187 for CVE-2022-50410",
"url": "https://bugzilla.suse.com/1250187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50410"
},
{
"cve": "CVE-2022-50482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50482"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Clean up si_domain in the init_dmars() error path\n\nA splat from kmem_cache_destroy() was seen with a kernel prior to\ncommit ee2653bbe89d (\"iommu/vt-d: Remove domain and devinfo mempool\")\nwhen there was a failure in init_dmars(), because the iommu_domain\ncache still had objects. While the mempool code is now gone, there\nstill is a leak of the si_domain memory if init_dmars() fails. So\nclean up si_domain in the init_dmars() error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50482",
"url": "https://www.suse.com/security/cve/CVE-2022-50482"
},
{
"category": "external",
"summary": "SUSE Bug 1251133 for CVE-2022-50482",
"url": "https://bugzilla.suse.com/1251133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50482"
},
{
"cve": "CVE-2022-50487",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50487"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50487",
"url": "https://www.suse.com/security/cve/CVE-2022-50487"
},
{
"category": "external",
"summary": "SUSE Bug 1251208 for CVE-2022-50487",
"url": "https://bugzilla.suse.com/1251208"
},
{
"category": "external",
"summary": "SUSE Bug 1268625 for CVE-2022-50487",
"url": "https://bugzilla.suse.com/1268625"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-425.13.1.el8_7.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-425.13.1.el8_7.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-425.13.1.el8_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-02-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-50487"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…