RHSA-2024:6997
Vulnerability from csaf_opensuse - Published: 2024-09-24 00:00 - Updated: 2026-09-20 11:43Summary
security update for kernel
Severity
Low
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2024:6997.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:6997.
Patchnames: RHSA-2024:6997
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.7 (Medium)
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
important
7.8 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2023-52439
Threats
Impact
moderate
References
70 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:6997.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:6997.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:6997",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_6997.json"
},
{
"category": "self",
"summary": "URL for RHSA-2024:6997",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-September/000081.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2024:6997",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-September/000081.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52439 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52884 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26930 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26947 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26991 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27022 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35895 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36016 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38562 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-38615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-38615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-40984 page",
"url": "https://www.suse.com/security/cve/CVE-2024-40984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41071 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42225 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42246 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42246/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:43:03Z",
"generator": {
"date": "2024-09-24T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:6997",
"initial_release_date": "2024-09-24T00:00:00Z",
"revision_history": [
{
"date": "2024-09-24T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:43:03Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-427.37.1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"product_id": "kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-427.37.1.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"product": {
"name": "bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"product_id": "bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.3.0-427.37.1.el9_4?arch=x86_64\u0026upstream=bpftool-0:7.3.0-427.37.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-427.37.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.37.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-427.37.1.el9_4?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-427.37.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-427.37.1.el9_4?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-427.37.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "perf-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "perf-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-427.37.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.37.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-427.37.1.el9_4?arch=x86_64\u0026upstream=perf-0:5.14.0-427.37.1.el9_4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-0:5.14.0-427.37.1.el9_4.x86_64",
"product": {
"name": "rv-0:5.14.0-427.37.1.el9_4.x86_64",
"product_id": "rv-0:5.14.0-427.37.1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-427.37.1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.3.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64"
},
"product_reference": "bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-427.37.1.el9_4.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "perf-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:5.14.0-427.37.1.el9_4.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
},
"product_reference": "rv-0:5.14.0-427.37.1.el9_4.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52439"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio: Fix use-after-free in uio_open\n\ncore-1\t\t\t\tcore-2\n-------------------------------------------------------\nuio_unregister_device\t\tuio_open\n\t\t\t\tidev = idr_find()\ndevice_unregister(\u0026idev-\u003edev)\nput_device(\u0026idev-\u003edev)\nuio_device_release\n\t\t\t\tget_device(\u0026idev-\u003edev)\nkfree(idev)\nuio_free_minor(minor)\n\t\t\t\tuio_release\n\t\t\t\tput_device(\u0026idev-\u003edev)\n\t\t\t\tkfree(idev)\n-------------------------------------------------------\n\nIn the core-1 uio_unregister_device(), the device_unregister will kfree\nidev when the idev-\u003edev kobject ref is 1. But after core-1\ndevice_unregister, put_device and before doing kfree, the core-2 may\nget_device. Then:\n1. After core-1 kfree idev, the core-2 will do use-after-free for idev.\n2. When core-2 do uio_release and put_device, the idev will be double\n freed.\n\nTo address this issue, we can get idev atomic \u0026 inc idev reference with\nminor_lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52439",
"url": "https://www.suse.com/security/cve/CVE-2023-52439"
},
{
"category": "external",
"summary": "SUSE Bug 1220140 for CVE-2023-52439",
"url": "https://bugzilla.suse.com/1220140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52439"
},
{
"cve": "CVE-2023-52884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: cyapa - add missing input core locking to suspend/resume functions\n\nGrab input-\u003emutex during suspend/resume functions like it is done in\nother input drivers. This fixes the following warning during system\nsuspend/resume cycle on Samsung Exynos5250-based Snow Chromebook:\n\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1680 at drivers/input/input.c:2291 input_device_enabled+0x68/0x6c\nModules linked in: ...\nCPU: 1 PID: 1680 Comm: kworker/u4:12 Tainted: G W 6.6.0-rc5-next-20231009 #14109\nHardware name: Samsung Exynos (Flattened Device Tree)\nWorkqueue: events_unbound async_run_entry_fn\n unwind_backtrace from show_stack+0x10/0x14\n show_stack from dump_stack_lvl+0x58/0x70\n dump_stack_lvl from __warn+0x1a8/0x1cc\n __warn from warn_slowpath_fmt+0x18c/0x1b4\n warn_slowpath_fmt from input_device_enabled+0x68/0x6c\n input_device_enabled from cyapa_gen3_set_power_mode+0x13c/0x1dc\n cyapa_gen3_set_power_mode from cyapa_reinitialize+0x10c/0x15c\n cyapa_reinitialize from cyapa_resume+0x48/0x98\n cyapa_resume from dpm_run_callback+0x90/0x298\n dpm_run_callback from device_resume+0xb4/0x258\n device_resume from async_resume+0x20/0x64\n async_resume from async_run_entry_fn+0x40/0x15c\n async_run_entry_fn from process_scheduled_works+0xbc/0x6a8\n process_scheduled_works from worker_thread+0x188/0x454\n worker_thread from kthread+0x108/0x140\n kthread from ret_from_fork+0x14/0x28\nException stack(0xf1625fb0 to 0xf1625ff8)\n...\n---[ end trace 0000000000000000 ]---\n...\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1680 at drivers/input/input.c:2291 input_device_enabled+0x68/0x6c\nModules linked in: ...\nCPU: 1 PID: 1680 Comm: kworker/u4:12 Tainted: G W 6.6.0-rc5-next-20231009 #14109\nHardware name: Samsung Exynos (Flattened Device Tree)\nWorkqueue: events_unbound async_run_entry_fn\n unwind_backtrace from show_stack+0x10/0x14\n show_stack from dump_stack_lvl+0x58/0x70\n dump_stack_lvl from __warn+0x1a8/0x1cc\n __warn from warn_slowpath_fmt+0x18c/0x1b4\n warn_slowpath_fmt from input_device_enabled+0x68/0x6c\n input_device_enabled from cyapa_gen3_set_power_mode+0x13c/0x1dc\n cyapa_gen3_set_power_mode from cyapa_reinitialize+0x10c/0x15c\n cyapa_reinitialize from cyapa_resume+0x48/0x98\n cyapa_resume from dpm_run_callback+0x90/0x298\n dpm_run_callback from device_resume+0xb4/0x258\n device_resume from async_resume+0x20/0x64\n async_resume from async_run_entry_fn+0x40/0x15c\n async_run_entry_fn from process_scheduled_works+0xbc/0x6a8\n process_scheduled_works from worker_thread+0x188/0x454\n worker_thread from kthread+0x108/0x140\n kthread from ret_from_fork+0x14/0x28\nException stack(0xf1625fb0 to 0xf1625ff8)\n...\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52884",
"url": "https://www.suse.com/security/cve/CVE-2023-52884"
},
{
"category": "external",
"summary": "SUSE Bug 1226764 for CVE-2023-52884",
"url": "https://bugzilla.suse.com/1226764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-52884"
},
{
"cve": "CVE-2024-26739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_mirred: don\u0027t override retval if we already lost the skb\n\nIf we\u0027re redirecting the skb, and haven\u0027t called tcf_mirred_forward(),\nyet, we need to tell the core to drop the skb by setting the retcode\nto SHOT. If we have called tcf_mirred_forward(), however, the skb\nis out of our hands and returning SHOT will lead to UaF.\n\nMove the retval override to the error path which actually need it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26739",
"url": "https://www.suse.com/security/cve/CVE-2024-26739"
},
{
"category": "external",
"summary": "SUSE Bug 1222559 for CVE-2024-26739",
"url": "https://bugzilla.suse.com/1222559"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26739"
},
{
"cve": "CVE-2024-26929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26929"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26929",
"url": "https://www.suse.com/security/cve/CVE-2024-26929"
},
{
"category": "external",
"summary": "SUSE Bug 1223715 for CVE-2024-26929",
"url": "https://bugzilla.suse.com/1223715"
},
{
"category": "external",
"summary": "SUSE Bug 1223716 for CVE-2024-26929",
"url": "https://bugzilla.suse.com/1223716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26929"
},
{
"cve": "CVE-2024-26930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26930"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix double free of the ha-\u003evp_map pointer\n\nCoverity scan reported potential risk of double free of the pointer\nha-\u003evp_map. ha-\u003evp_map was freed in qla2x00_mem_alloc(), and again freed\nin function qla2x00_mem_free(ha).\n\nAssign NULL to vp_map and kfree take care of NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26930",
"url": "https://www.suse.com/security/cve/CVE-2024-26930"
},
{
"category": "external",
"summary": "SUSE Bug 1223626 for CVE-2024-26930",
"url": "https://bugzilla.suse.com/1223626"
},
{
"category": "external",
"summary": "SUSE Bug 1223681 for CVE-2024-26930",
"url": "https://bugzilla.suse.com/1223681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26930"
},
{
"cve": "CVE-2024-26931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix command flush on cable pull\n\nSystem crash due to command failed to flush back to SCSI layer.\n\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000000\n PGD 0 P4D 0\n Oops: 0000 [#1] SMP NOPTI\n CPU: 27 PID: 793455 Comm: kworker/u130:6 Kdump: loaded Tainted: G OE --------- - - 4.18.0-372.9.1.el8.x86_64 #1\n Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 09/03/2021\n Workqueue: nvme-wq nvme_fc_connect_ctrl_work [nvme_fc]\n RIP: 0010:__wake_up_common+0x4c/0x190\n Code: 24 10 4d 85 c9 74 0a 41 f6 01 04 0f 85 9d 00 00 00 48 8b 43 08 48 83 c3 08 4c 8d 48 e8 49 8d 41 18 48 39 c3 0f 84 f0 00 00 00 \u003c49\u003e 8b 41 18 89 54 24 08 31 ed 4c 8d 70 e8 45 8b 29 41 f6 c5 04 75\n RSP: 0018:ffff95f3e0cb7cd0 EFLAGS: 00010086\n RAX: 0000000000000000 RBX: ffff8b08d3b26328 RCX: 0000000000000000\n RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8b08d3b26320\n RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffe8\n R10: 0000000000000000 R11: ffff95f3e0cb7a60 R12: ffff95f3e0cb7d20\n R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000\n FS: 0000000000000000(0000) GS:ffff8b2fdf6c0000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000000 CR3: 0000002f1e410002 CR4: 00000000007706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n __wake_up_common_lock+0x7c/0xc0\n qla_nvme_ls_req+0x355/0x4c0 [qla2xxx]\n qla2xxx [0000:12:00.1]-f084:3: qlt_free_session_done: se_sess 0000000000000000 / sess ffff8ae1407ca000 from port 21:32:00:02:ac:07:ee:b8 loop_id 0x02 s_id 01:02:00 logout 1 keep 0 els_logo 0\n ? __nvme_fc_send_ls_req+0x260/0x380 [nvme_fc]\n qla2xxx [0000:12:00.1]-207d:3: FCPort 21:32:00:02:ac:07:ee:b8 state transitioned from ONLINE to LOST - portid=010200.\n ? nvme_fc_send_ls_req.constprop.42+0x1a/0x45 [nvme_fc]\n qla2xxx [0000:12:00.1]-2109:3: qla2x00_schedule_rport_del 21320002ac07eeb8. rport ffff8ae598122000 roles 1\n ? nvme_fc_connect_ctrl_work.cold.63+0x1e3/0xa7d [nvme_fc]\n qla2xxx [0000:12:00.1]-f084:3: qlt_free_session_done: se_sess 0000000000000000 / sess ffff8ae14801e000 from port 21:32:01:02:ad:f7:ee:b8 loop_id 0x04 s_id 01:02:01 logout 1 keep 0 els_logo 0\n ? __switch_to+0x10c/0x450\n ? process_one_work+0x1a7/0x360\n qla2xxx [0000:12:00.1]-207d:3: FCPort 21:32:01:02:ad:f7:ee:b8 state transitioned from ONLINE to LOST - portid=010201.\n ? worker_thread+0x1ce/0x390\n ? create_worker+0x1a0/0x1a0\n qla2xxx [0000:12:00.1]-2109:3: qla2x00_schedule_rport_del 21320102adf7eeb8. rport ffff8ae3b2312800 roles 70\n ? kthread+0x10a/0x120\n qla2xxx [0000:12:00.1]-2112:3: qla_nvme_unregister_remote_port: unregister remoteport on ffff8ae14801e000 21320102adf7eeb8\n ? set_kthread_struct+0x40/0x40\n qla2xxx [0000:12:00.1]-2110:3: remoteport_delete of ffff8ae14801e000 21320102adf7eeb8 completed.\n ? ret_from_fork+0x1f/0x40\n qla2xxx [0000:12:00.1]-f086:3: qlt_free_session_done: waiting for sess ffff8ae14801e000 logout\n\nThe system was under memory stress where driver was not able to allocate an\nSRB to carry out error recovery of cable pull. The failure to flush causes\nupper layer to start modifying scsi_cmnd. When the system frees up some\nmemory, the subsequent cable pull trigger another command flush. At this\npoint the driver access a null pointer when attempting to DMA unmap the\nSGL.\n\nAdd a check to make sure commands are flush back on session tear down to\nprevent the null pointer access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26931",
"url": "https://www.suse.com/security/cve/CVE-2024-26931"
},
{
"category": "external",
"summary": "SUSE Bug 1223627 for CVE-2024-26931",
"url": "https://bugzilla.suse.com/1223627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26931"
},
{
"cve": "CVE-2024-26947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses\n\nSince commit a4d5613c4dc6 (\"arm: extend pfn_valid to take into account\nfreed memory map alignment\") changes the semantics of pfn_valid() to check\npresence of the memory map for a PFN. A valid page for an address which\nis reserved but not mapped by the kernel[1], the system crashed during\nsome uio test with the following memory layout:\n\n node 0: [mem 0x00000000c0a00000-0x00000000cc8fffff]\n node 0: [mem 0x00000000d0000000-0x00000000da1fffff]\n the uio layout is:0xc0900000, 0x100000\n\nthe crash backtrace like:\n\n Unable to handle kernel paging request at virtual address bff00000\n [...]\n CPU: 1 PID: 465 Comm: startapp.bin Tainted: G O 5.10.0 #1\n Hardware name: Generic DT based system\n PC is at b15_flush_kern_dcache_area+0x24/0x3c\n LR is at __sync_icache_dcache+0x6c/0x98\n [...]\n (b15_flush_kern_dcache_area) from (__sync_icache_dcache+0x6c/0x98)\n (__sync_icache_dcache) from (set_pte_at+0x28/0x54)\n (set_pte_at) from (remap_pfn_range+0x1a0/0x274)\n (remap_pfn_range) from (uio_mmap+0x184/0x1b8 [uio])\n (uio_mmap [uio]) from (__mmap_region+0x264/0x5f4)\n (__mmap_region) from (__do_mmap_mm+0x3ec/0x440)\n (__do_mmap_mm) from (do_mmap+0x50/0x58)\n (do_mmap) from (vm_mmap_pgoff+0xfc/0x188)\n (vm_mmap_pgoff) from (ksys_mmap_pgoff+0xac/0xc4)\n (ksys_mmap_pgoff) from (ret_fast_syscall+0x0/0x5c)\n Code: e0801001 e2423001 e1c00003 f57ff04f (ee070f3e)\n ---[ end trace 09cf0734c3805d52 ]---\n Kernel panic - not syncing: Fatal exception\n\nSo check if PG_reserved was set to solve this issue.\n\n[1]: https://lore.kernel.org/lkml/Zbtdue57RO0QScJM@linux.ibm.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26947",
"url": "https://www.suse.com/security/cve/CVE-2024-26947"
},
{
"category": "external",
"summary": "SUSE Bug 1223662 for CVE-2024-26947",
"url": "https://bugzilla.suse.com/1223662"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26947"
},
{
"cve": "CVE-2024-26991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26991"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: x86: Don\u0027t overflow lpage_info when checking attributes\n\nFix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger\nKASAN splat, as seen in the private_mem_conversions_test selftest.\n\nWhen memory attributes are set on a GFN range, that range will have\nspecific properties applied to the TDP. A huge page cannot be used when\nthe attributes are inconsistent, so they are disabled for those the\nspecific huge pages. For internal KVM reasons, huge pages are also not\nallowed to span adjacent memslots regardless of whether the backing memory\ncould be mapped as huge.\n\nWhat GFNs support which huge page sizes is tracked by an array of arrays\n\u0027lpage_info\u0027 on the memslot, of \u0027kvm_lpage_info\u0027 structs. Each index of\nlpage_info contains a vmalloc allocated array of these for a specific\nsupported page size. The kvm_lpage_info denotes whether a specific huge\npage (GFN and page size) on the memslot is supported. These arrays include\nindices for unaligned head and tail huge pages.\n\nPreventing huge pages from spanning adjacent memslot is covered by\nincrementing the count in head and tail kvm_lpage_info when the memslot is\nallocated, but disallowing huge pages for memory that has mixed attributes\nhas to be done in a more complicated way. During the\nKVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in\nthe range that has mismatched attributes. KVM does this a memslot at a\ntime, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info\nfor any huge page. This bit is essentially a permanently elevated count.\nSo huge pages will not be mapped for the GFN at that page size if the\ncount is elevated in either case: a huge head or tail page unaligned to\nthe memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed\nattributes.\n\nTo determine whether a huge page has consistent attributes, the\nKVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it\nconsistently has the incoming attribute. Since level - 1 huge pages are\naligned to level huge pages, it employs an optimization. As long as the\nlevel - 1 huge pages are checked first, it can just check these and assume\nthat if each level - 1 huge page contained within the level sized huge\npage is not mixed, then the level size huge page is not mixed. This\noptimization happens in the helper hugepage_has_attrs().\n\nUnfortunately, although the kvm_lpage_info array representing page size\n\u0027level\u0027 will contain an entry for an unaligned tail page of size level,\nthe array for level - 1 will not contain an entry for each GFN at page\nsize level. The level - 1 array will only contain an index for any\nunaligned region covered by level - 1 huge page size, which can be a\nsmaller region. So this causes the optimization to overflow the level - 1\nkvm_lpage_info and perform a vmalloc out of bounds read.\n\nIn some cases of head and tail pages where an overflow could happen,\ncallers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not\nrequired to prevent huge pages as discussed earlier. But for memslots that\nare smaller than the 1GB page size, it does call hugepage_has_attrs(). In\nthis case the huge page is both the head and tail page. The issue can be\nobserved simply by compiling the kernel with CONFIG_KASAN_VMALLOC and\nrunning the selftest \"private_mem_conversions_test\", which produces the\noutput like the following:\n\nBUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110\nRead of size 4 at addr ffffc900000a3008 by task private_mem_con/169\nCall Trace:\n dump_stack_lvl\n print_report\n ? __virt_addr_valid\n ? hugepage_has_attrs\n ? hugepage_has_attrs\n kasan_report\n ? hugepage_has_attrs\n hugepage_has_attrs\n kvm_arch_post_set_memory_attributes\n kvm_vm_ioctl\n\nIt is a little ambiguous whether the unaligned head page (in the bug case\nalso the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set.\nIt is not functionally required, as the unal\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26991",
"url": "https://www.suse.com/security/cve/CVE-2024-26991"
},
{
"category": "external",
"summary": "SUSE Bug 1223695 for CVE-2024-26991",
"url": "https://bugzilla.suse.com/1223695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26991"
},
{
"cve": "CVE-2024-27022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27022"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfork: defer linking file vma until vma is fully initialized\n\nThorvald reported a WARNING [1]. And the root cause is below race:\n\n CPU 1\t\t\t\t\tCPU 2\n fork\t\t\t\t\thugetlbfs_fallocate\n dup_mmap\t\t\t\t hugetlbfs_punch_hole\n i_mmap_lock_write(mapping);\n vma_interval_tree_insert_after -- Child vma is visible through i_mmap tree.\n i_mmap_unlock_write(mapping);\n hugetlb_dup_vma_private -- Clear vma_lock outside i_mmap_rwsem!\n\t\t\t\t\t i_mmap_lock_write(mapping);\n \t\t\t\t\t hugetlb_vmdelete_list\n\t\t\t\t\t vma_interval_tree_foreach\n\t\t\t\t\t hugetlb_vma_trylock_write -- Vma_lock is cleared.\n tmp-\u003evm_ops-\u003eopen -- Alloc new vma_lock outside i_mmap_rwsem!\n\t\t\t\t\t hugetlb_vma_unlock_write -- Vma_lock is assigned!!!\n\t\t\t\t\t i_mmap_unlock_write(mapping);\n\nhugetlb_dup_vma_private() and hugetlb_vm_op_open() are called outside\ni_mmap_rwsem lock while vma lock can be used in the same time. Fix this\nby deferring linking file vma until vma is fully initialized. Those vmas\nshould be initialized first before they can be used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27022",
"url": "https://www.suse.com/security/cve/CVE-2024-27022"
},
{
"category": "external",
"summary": "SUSE Bug 1223774 for CVE-2024-27022",
"url": "https://bugzilla.suse.com/1223774"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27022"
},
{
"cve": "CVE-2024-35895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35895"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Prevent lock inversion deadlock in map delete elem\n\nsyzkaller started using corpuses where a BPF tracing program deletes\nelements from a sockmap/sockhash map. Because BPF tracing programs can be\ninvoked from any interrupt context, locks taken during a map_delete_elem\noperation must be hardirq-safe. Otherwise a deadlock due to lock inversion\nis possible, as reported by lockdep:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026htab-\u003ebuckets[i].lock);\n local_irq_disable();\n lock(\u0026host-\u003elock);\n lock(\u0026htab-\u003ebuckets[i].lock);\n \u003cInterrupt\u003e\n lock(\u0026host-\u003elock);\n\nLocks in sockmap are hardirq-unsafe by design. We expects elements to be\ndeleted from sockmap/sockhash only in task (normal) context with interrupts\nenabled, or in softirq context.\n\nDetect when map_delete_elem operation is invoked from a context which is\n_not_ hardirq-unsafe, that is interrupts are disabled, and bail out with an\nerror.\n\nNote that map updates are not affected by this issue. BPF verifier does not\nallow updating sockmap/sockhash from a BPF tracing program today.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35895",
"url": "https://www.suse.com/security/cve/CVE-2024-35895"
},
{
"category": "external",
"summary": "SUSE Bug 1224511 for CVE-2024-35895",
"url": "https://bugzilla.suse.com/1224511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-35895"
},
{
"cve": "CVE-2024-36016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36016"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: n_gsm: fix possible out-of-bounds in gsm0_receive()\n\nAssuming the following:\n- side A configures the n_gsm in basic option mode\n- side B sends the header of a basic option mode frame with data length 1\n- side A switches to advanced option mode\n- side B sends 2 data bytes which exceeds gsm-\u003elen\n Reason: gsm-\u003elen is not used in advanced option mode.\n- side A switches to basic option mode\n- side B keeps sending until gsm0_receive() writes past gsm-\u003ebuf\n Reason: Neither gsm-\u003estate nor gsm-\u003elen have been reset after\n reconfiguration.\n\nFix this by changing gsm-\u003ecount to gsm-\u003elen comparison from equal to less\nthan. Also add upper limit checks against the constant MAX_MRU in\ngsm0_receive() and gsm1_receive() to harden against memory corruption of\ngsm-\u003elen and gsm-\u003emru.\n\nAll other checks remain as we still need to limit the data according to the\nuser configuration and actual payload size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36016",
"url": "https://www.suse.com/security/cve/CVE-2024-36016"
},
{
"category": "external",
"summary": "SUSE Bug 1225642 for CVE-2024-36016",
"url": "https://bugzilla.suse.com/1225642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-36016"
},
{
"cve": "CVE-2024-36899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpiolib: cdev: Fix use after free in lineinfo_changed_notify\n\nThe use-after-free issue occurs as follows: when the GPIO chip device file\nis being closed by invoking gpio_chrdev_release(), watched_lines is freed\nby bitmap_free(), but the unregistration of lineinfo_changed_nb notifier\nchain failed due to waiting write rwsem. Additionally, one of the GPIO\nchip\u0027s lines is also in the release process and holds the notifier chain\u0027s\nread rwsem. Consequently, a race condition leads to the use-after-free of\nwatched_lines.\n\nHere is the typical stack when issue happened:\n\n[free]\ngpio_chrdev_release()\n --\u003e bitmap_free(cdev-\u003ewatched_lines) \u003c-- freed\n --\u003e blocking_notifier_chain_unregister()\n --\u003e down_write(\u0026nh-\u003erwsem) \u003c-- waiting rwsem\n --\u003e __down_write_common()\n --\u003e rwsem_down_write_slowpath()\n --\u003e schedule_preempt_disabled()\n --\u003e schedule()\n\n[use]\nst54spi_gpio_dev_release()\n --\u003e gpio_free()\n --\u003e gpiod_free()\n --\u003e gpiod_free_commit()\n --\u003e gpiod_line_state_notify()\n --\u003e blocking_notifier_call_chain()\n --\u003e down_read(\u0026nh-\u003erwsem); \u003c-- held rwsem\n --\u003e notifier_call_chain()\n --\u003e lineinfo_changed_notify()\n --\u003e test_bit(xxxx, cdev-\u003ewatched_lines) \u003c-- use after free\n\nThe side effect of the use-after-free issue is that a GPIO line event is\nbeing generated for userspace where it shouldn\u0027t. However, since the chrdev\nis being closed, userspace won\u0027t have the chance to read that event anyway.\n\nTo fix the issue, call the bitmap_free() function after the unregistration\nof lineinfo_changed_nb notifier chain.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36899",
"url": "https://www.suse.com/security/cve/CVE-2024-36899"
},
{
"category": "external",
"summary": "SUSE Bug 1225737 for CVE-2024-36899",
"url": "https://bugzilla.suse.com/1225737"
},
{
"category": "external",
"summary": "SUSE Bug 1225739 for CVE-2024-36899",
"url": "https://bugzilla.suse.com/1225739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-36899"
},
{
"cve": "CVE-2024-38562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38562"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: Avoid address calculations via out of bounds array indexing\n\nBefore request-\u003echannels[] can be used, request-\u003en_channels must be set.\nAdditionally, address calculations for memory after the \"channels\" array\nneed to be calculated from the allocation base (\"request\") rather than\nvia the first \"out of bounds\" index of \"channels\", otherwise run-time\nbounds checking will throw a warning.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38562",
"url": "https://www.suse.com/security/cve/CVE-2024-38562"
},
{
"category": "external",
"summary": "SUSE Bug 1226788 for CVE-2024-38562",
"url": "https://bugzilla.suse.com/1226788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38562"
},
{
"cve": "CVE-2024-38570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix potential glock use-after-free on unmount\n\nWhen a DLM lockspace is released and there ares still locks in that\nlockspace, DLM will unlock those locks automatically. Commit\nfb6791d100d1b started exploiting this behavior to speed up filesystem\nunmount: gfs2 would simply free glocks it didn\u0027t want to unlock and then\nrelease the lockspace. This didn\u0027t take the bast callbacks for\nasynchronous lock contention notifications into account, which remain\nactive until until a lock is unlocked or its lockspace is released.\n\nTo prevent those callbacks from accessing deallocated objects, put the\nglocks that should not be unlocked on the sd_dead_glocks list, release\nthe lockspace, and only then free those glocks.\n\nAs an additional measure, ignore unexpected ast and bast callbacks if\nthe receiving glock is dead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38570",
"url": "https://www.suse.com/security/cve/CVE-2024-38570"
},
{
"category": "external",
"summary": "SUSE Bug 1226775 for CVE-2024-38570",
"url": "https://bugzilla.suse.com/1226775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38570"
},
{
"cve": "CVE-2024-38573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncppc_cpufreq: Fix possible null pointer dereference\n\ncppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from\ndifferent places with various parameters. So cpufreq_cpu_get() can return\nnull as \u0027policy\u0027 in some circumstances.\nFix this bug by adding null return check.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38573",
"url": "https://www.suse.com/security/cve/CVE-2024-38573"
},
{
"category": "external",
"summary": "SUSE Bug 1226739 for CVE-2024-38573",
"url": "https://bugzilla.suse.com/1226739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38573"
},
{
"cve": "CVE-2024-38601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Fix a race between readers and resize checks\n\nThe reader code in rb_get_reader_page() swaps a new reader page into the\nring buffer by doing cmpxchg on old-\u003elist.prev-\u003enext to point it to the\nnew page. Following that, if the operation is successful,\nold-\u003elist.next-\u003eprev gets updated too. This means the underlying\ndoubly-linked list is temporarily inconsistent, page-\u003eprev-\u003enext or\npage-\u003enext-\u003eprev might not be equal back to page for some page in the\nring buffer.\n\nThe resize operation in ring_buffer_resize() can be invoked in parallel.\nIt calls rb_check_pages() which can detect the described inconsistency\nand stop further tracing:\n\n[ 190.271762] ------------[ cut here ]------------\n[ 190.271771] WARNING: CPU: 1 PID: 6186 at kernel/trace/ring_buffer.c:1467 rb_check_pages.isra.0+0x6a/0xa0\n[ 190.271789] Modules linked in: [...]\n[ 190.271991] Unloaded tainted modules: intel_uncore_frequency(E):1 skx_edac(E):1\n[ 190.272002] CPU: 1 PID: 6186 Comm: cmd.sh Kdump: loaded Tainted: G E 6.9.0-rc6-default #5 158d3e1e6d0b091c34c3b96bfd99a1c58306d79f\n[ 190.272011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552c-rebuilt.opensuse.org 04/01/2014\n[ 190.272015] RIP: 0010:rb_check_pages.isra.0+0x6a/0xa0\n[ 190.272023] Code: [...]\n[ 190.272028] RSP: 0018:ffff9c37463abb70 EFLAGS: 00010206\n[ 190.272034] RAX: ffff8eba04b6cb80 RBX: 0000000000000007 RCX: ffff8eba01f13d80\n[ 190.272038] RDX: ffff8eba01f130c0 RSI: ffff8eba04b6cd00 RDI: ffff8eba0004c700\n[ 190.272042] RBP: ffff8eba0004c700 R08: 0000000000010002 R09: 0000000000000000\n[ 190.272045] R10: 00000000ffff7f52 R11: ffff8eba7f600000 R12: ffff8eba0004c720\n[ 190.272049] R13: ffff8eba00223a00 R14: 0000000000000008 R15: ffff8eba067a8000\n[ 190.272053] FS: 00007f1bd64752c0(0000) GS:ffff8eba7f680000(0000) knlGS:0000000000000000\n[ 190.272057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 190.272061] CR2: 00007f1bd6662590 CR3: 000000010291e001 CR4: 0000000000370ef0\n[ 190.272070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 190.272073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 190.272077] Call Trace:\n[ 190.272098] \u003cTASK\u003e\n[ 190.272189] ring_buffer_resize+0x2ab/0x460\n[ 190.272199] __tracing_resize_ring_buffer.part.0+0x23/0xa0\n[ 190.272206] tracing_resize_ring_buffer+0x65/0x90\n[ 190.272216] tracing_entries_write+0x74/0xc0\n[ 190.272225] vfs_write+0xf5/0x420\n[ 190.272248] ksys_write+0x67/0xe0\n[ 190.272256] do_syscall_64+0x82/0x170\n[ 190.272363] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 190.272373] RIP: 0033:0x7f1bd657d263\n[ 190.272381] Code: [...]\n[ 190.272385] RSP: 002b:00007ffe72b643f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\n[ 190.272391] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1bd657d263\n[ 190.272395] RDX: 0000000000000002 RSI: 0000555a6eb538e0 RDI: 0000000000000001\n[ 190.272398] RBP: 0000555a6eb538e0 R08: 000000000000000a R09: 0000000000000000\n[ 190.272401] R10: 0000555a6eb55190 R11: 0000000000000246 R12: 00007f1bd6662500\n[ 190.272404] R13: 0000000000000002 R14: 00007f1bd6667c00 R15: 0000000000000002\n[ 190.272412] \u003c/TASK\u003e\n[ 190.272414] ---[ end trace 0000000000000000 ]---\n\nNote that ring_buffer_resize() calls rb_check_pages() only if the parent\ntrace_buffer has recording disabled. Recent commit d78ab792705c\n(\"tracing: Stop current tracer when resizing buffer\") causes that it is\nnow always the case which makes it more likely to experience this issue.\n\nThe window to hit this race is nonetheless very small. To help\nreproducing it, one can add a delay loop in rb_get_reader_page():\n\n ret = rb_head_page_replace(reader, cpu_buffer-\u003ereader_page);\n if (!ret)\n \tgoto spin;\n for (unsigned i = 0; i \u003c 1U \u003c\u003c 26; i++) /* inserted delay loop */\n \t__asm__ __volatile__ (\"\" : : : \"memory\");\n rb_list_head(reader-\u003elist.next)-\u003eprev = \u0026cpu_buffer-\u003ereader_page-\u003elist;\n\n.. \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38601",
"url": "https://www.suse.com/security/cve/CVE-2024-38601"
},
{
"category": "external",
"summary": "SUSE Bug 1226876 for CVE-2024-38601",
"url": "https://bugzilla.suse.com/1226876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38601"
},
{
"cve": "CVE-2024-38615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-38615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: exit() callback is optional\n\nThe exit() callback is optional and shouldn\u0027t be called without checking\na valid pointer first.\n\nAlso, we must clear freq_table pointer even if the exit() callback isn\u0027t\npresent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-38615",
"url": "https://www.suse.com/security/cve/CVE-2024-38615"
},
{
"category": "external",
"summary": "SUSE Bug 1226592 for CVE-2024-38615",
"url": "https://bugzilla.suse.com/1226592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-38615"
},
{
"cve": "CVE-2024-40984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-40984"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Revert \"ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.\"\n\nUndo the modifications made in commit d410ee5109a1 (\"ACPICA: avoid\n\"Info: mapping multiple BARs. Your kernel is fine.\"\"). The initial\npurpose of this commit was to stop memory mappings for operation\nregions from overlapping page boundaries, as it can trigger warnings\nif different page attributes are present.\n\nHowever, it was found that when this situation arises, mapping\ncontinues until the boundary\u0027s end, but there is still an attempt to\nread/write the entire length of the map, leading to a NULL pointer\ndeference. For example, if a four-byte mapping request is made but\nonly one byte is mapped because it hits the current page boundary\u0027s\nend, a four-byte read/write attempt is still made, resulting in a NULL\npointer deference.\n\nInstead, map the entire length, as the ACPI specification does not\nmandate that it must be within the same page boundary. It is\npermissible for it to be mapped across different regions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-40984",
"url": "https://www.suse.com/security/cve/CVE-2024-40984"
},
{
"category": "external",
"summary": "SUSE Bug 1227820 for CVE-2024-40984",
"url": "https://bugzilla.suse.com/1227820"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-40984"
},
{
"cve": "CVE-2024-41071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41071"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41071",
"url": "https://www.suse.com/security/cve/CVE-2024-41071"
},
{
"category": "external",
"summary": "SUSE Bug 1228625 for CVE-2024-41071",
"url": "https://bugzilla.suse.com/1228625"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-41071"
},
{
"cve": "CVE-2024-42225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42225"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: replace skb_put with skb_put_zero\n\nAvoid potentially reusing uninitialized data",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42225",
"url": "https://www.suse.com/security/cve/CVE-2024-42225"
},
{
"category": "external",
"summary": "SUSE Bug 1228710 for CVE-2024-42225",
"url": "https://bugzilla.suse.com/1228710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42225"
},
{
"cve": "CVE-2024-42246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42246"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket\n\nWhen using a BPF program on kernel_connect(), the call can return -EPERM. This\ncauses xs_tcp_setup_socket() to loop forever, filling up the syslog and causing\nthe kernel to potentially freeze up.\n\nNeil suggested:\n\n This will propagate -EPERM up into other layers which might not be ready\n to handle it. It might be safer to map EPERM to an error we would be more\n likely to expect from the network system - such as ECONNREFUSED or ENETDOWN.\n\nECONNREFUSED as error seems reasonable. For programs setting a different error\ncan be out of reach (see handling in 4fbac77d2d09) in particular on kernels\nwhich do not have f10d05966196 (\"bpf: Make BPF_PROG_RUN_ARRAY return -err\ninstead of allow boolean\"), thus given that it is better to simply remap for\nconsistent behavior. UDP does handle EPERM in xs_udp_send_request().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42246",
"url": "https://www.suse.com/security/cve/CVE-2024-42246"
},
{
"category": "external",
"summary": "SUSE Bug 1228989 for CVE-2024-42246",
"url": "https://bugzilla.suse.com/1228989"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.3.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-427.37.1.el9_4.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:libperf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-427.37.1.el9_4.x86_64",
"SUSE Liberty Linux 9:rv-0:5.14.0-427.37.1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-42246"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…