SUSE update for the Linux Kernel

Published: 2022-02-02

Risk	Low
Patch available	YES
Number of vulnerabilities	9
CVE-ID	CVE-2021-4083 CVE-2021-4135 CVE-2021-4149 CVE-2021-4197 CVE-2021-4202 CVE-2021-44733 CVE-2021-46283 CVE-2022-0185 CVE-2022-0322
CWE-ID	CWE-416 CWE-200 CWE-667 CWE-264 CWE-476 CWE-190 CWE-704
Exploitation vector	Local
Public exploit	Public exploit code for vulnerability #6 is available. Vulnerability #8 is being exploited in the wild.
Vulnerable software	SUSE Linux Enterprise Module for Realtime Operating systems & Components / Operating system SUSE Linux Enterprise Micro Operating systems & Components / Operating system ocfs2-kmp-rt-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-rt Operating systems & Components / Operating system package or component kernel-syms-rt Operating systems & Components / Operating system package or component kernel-rt_debug-devel-debuginfo Operating systems & Components / Operating system package or component kernel-rt_debug-devel Operating systems & Components / Operating system package or component kernel-rt_debug-debugsource Operating systems & Components / Operating system package or component kernel-rt_debug-debuginfo Operating systems & Components / Operating system package or component kernel-rt-devel-debuginfo Operating systems & Components / Operating system package or component kernel-rt-devel Operating systems & Components / Operating system package or component kernel-rt-debugsource Operating systems & Components / Operating system package or component kernel-rt-debuginfo Operating systems & Components / Operating system package or component kernel-rt Operating systems & Components / Operating system package or component gfs2-kmp-rt-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-rt Operating systems & Components / Operating system package or component dlm-kmp-rt-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-rt Operating systems & Components / Operating system package or component cluster-md-kmp-rt-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-rt Operating systems & Components / Operating system package or component kernel-source-rt Operating systems & Components / Operating system package or component kernel-devel-rt Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 9 vulnerabilities.

1) Use-after-free

EUVDB-ID: #VU61246

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4083

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the Linux kernel's garbage collection for Unix domain socket file handlers. A local user can call close() and fget() simultaneously and can potentially trigger a race condition, which in turn leads to a use-after-free error and allows privilege escalation.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Information disclosure

EUVDB-ID: #VU63566

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4135

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to simulated networking device driver for the Linux kernel does not properly initialize memory in certain situations. A local user can gain unauthorized access to sensitive information (kernel memory).

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Improper locking

EUVDB-ID: #VU64071

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4149

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack (DoS) on the target system.

The vulnerability exists in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. A local user can exploit this vulnerability to cause a deadlock, resulting in a denial of service condition.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Security restrictions bypass

EUVDB-ID: #VU61258

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4197

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to missing permissions checks within the cgroups (control groups) functionality of Linux Kernel when writing into a file descriptor. A local low privileged process can trick a higher privileged parent process into writing arbitrary data into files, which can result in denial of service or privileges escalation.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU63764

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4202

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in the nci_request() function in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. A local user can cause a data race problem while the device is getting removed and escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Use-after-free

EUVDB-ID: #VU59100

Risk: Low

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2021-44733

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

Description

The vulnerability allows a local user to elevate privileges on the system.

The vulnerability exists due to a use-after-free error in the drivers/tee/tee_shm.c file within the TEE subsystem in the Linux kernel. A local user can trigger a race condition in tee_shm_get_from_id during an attempt to free a shared memory object and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

7) NULL pointer dereference

EUVDB-ID: #VU90667

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46283

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the nf_tables_newset() function in net/netfilter/nf_tables_api.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Integer overflow

EUVDB-ID: #VU59695

Risk: Low

CVSSv4.0: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear]

CVE-ID: CVE-2022-0185

CWE-ID: CWE-190 - Integer overflow

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow in the legacy_parse_param() function in fs/fs_context.c in Linux kernel. A local user can tun a specially crafted program to trigger integer overflow and execute arbitrary code with root privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.

9) Type conversion

EUVDB-ID: #VU63856

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0322

CWE-ID: CWE-704 - Type conversion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to a type conversion error in the sctp_make_strreset_req() function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel. A local user can perform a denial of service attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Realtime: 15-SP3

SUSE Linux Enterprise Micro: 5.1

ocfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

ocfs2-kmp-rt: before 5.3.18-150300.71.1

kernel-syms-rt: before 5.3.18-150300.71.1

kernel-rt_debug-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt_debug-devel: before 5.3.18-150300.71.1

kernel-rt_debug-debugsource: before 5.3.18-150300.71.1

kernel-rt_debug-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel-debuginfo: before 5.3.18-150300.71.1

kernel-rt-devel: before 5.3.18-150300.71.1

kernel-rt-debugsource: before 5.3.18-150300.71.1

kernel-rt-debuginfo: before 5.3.18-150300.71.1

kernel-rt: before 5.3.18-150300.71.1

gfs2-kmp-rt-debuginfo: before 5.3.18-150300.71.1

gfs2-kmp-rt: before 5.3.18-150300.71.1

dlm-kmp-rt-debuginfo: before 5.3.18-150300.71.1

dlm-kmp-rt: before 5.3.18-150300.71.1

cluster-md-kmp-rt-debuginfo: before 5.3.18-150300.71.1

cluster-md-kmp-rt: before 5.3.18-150300.71.1

kernel-source-rt: before 5.3.18-150300.71.1

kernel-devel-rt: before 5.3.18-150300.71.1

CPE2.3

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220288-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.