Risk | Low |
Patch available | YES |
Number of vulnerabilities | 15 |
CVE-ID | CVE-2021-45868 CVE-2022-0850 CVE-2022-0854 CVE-2022-1011 CVE-2022-1016 CVE-2022-1048 CVE-2022-1055 CVE-2022-1195 CVE-2022-1198 CVE-2022-1199 CVE-2022-1205 CVE-2022-27666 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 |
CWE-ID | CWE-416 CWE-200 CWE-401 CWE-476 CWE-122 CWE-415 |
Exploitation vector | Local |
Public exploit |
Public exploit code for vulnerability #4 is available. Public exploit code for vulnerability #12 is available. |
Vulnerable software |
SUSE Linux Enterprise Server Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications Operating systems & Components / Operating system SUSE Manager Retail Branch Server Operating systems & Components / Operating system SUSE Linux Enterprise Workstation Extension Operating systems & Components / Operating system SUSE Linux Enterprise Module for Legacy Software Operating systems & Components / Operating system SUSE Linux Enterprise Micro Operating systems & Components / Operating system SUSE Linux Enterprise High Availability Operating systems & Components / Operating system SUSE Linux Enterprise Desktop Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system SUSE Linux Enterprise Module for Live Patching Operating systems & Components / Operating system SUSE Linux Enterprise Module for Development Tools Operating systems & Components / Operating system SUSE Linux Enterprise Module for Basesystem Operating systems & Components / Operating system kernel-livepatch-5_3_18-150300_59_63-default Operating systems & Components / Operating system package or component kernel-zfcpdump-debugsource Operating systems & Components / Operating system package or component kernel-zfcpdump-debuginfo Operating systems & Components / Operating system package or component kernel-zfcpdump Operating systems & Components / Operating system package or component kernel-source-vanilla Operating systems & Components / Operating system package or component kernel-source Operating systems & Components / Operating system package or component kernel-macros Operating systems & Components / Operating system package or component kernel-docs-html Operating systems & Components / Operating system package or component kernel-docs Operating systems & Components / Operating system package or component kernel-devel Operating systems & Components / Operating system package or component reiserfs-kmp-64kb-debuginfo Operating systems & Components / Operating system package or component reiserfs-kmp-64kb Operating systems & Components / Operating system package or component ocfs2-kmp-64kb-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-64kb Operating systems & Components / Operating system package or component kselftests-kmp-64kb-debuginfo Operating systems & Components / Operating system package or component kselftests-kmp-64kb Operating systems & Components / Operating system package or component kernel-64kb-optional-debuginfo Operating systems & Components / Operating system package or component kernel-64kb-optional Operating systems & Components / Operating system package or component kernel-64kb-livepatch-devel Operating systems & Components / Operating system package or component kernel-64kb-extra-debuginfo Operating systems & Components / Operating system package or component kernel-64kb-extra Operating systems & Components / Operating system package or component kernel-64kb-devel-debuginfo Operating systems & Components / Operating system package or component kernel-64kb-devel Operating systems & Components / Operating system package or component kernel-64kb-debugsource Operating systems & Components / Operating system package or component kernel-64kb-debuginfo Operating systems & Components / Operating system package or component kernel-64kb Operating systems & Components / Operating system package or component gfs2-kmp-64kb-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-64kb Operating systems & Components / Operating system package or component dtb-xilinx Operating systems & Components / Operating system package or component dtb-sprd Operating systems & Components / Operating system package or component dtb-socionext Operating systems & Components / Operating system package or component dtb-rockchip Operating systems & Components / Operating system package or component dtb-renesas Operating systems & Components / Operating system package or component dtb-qcom Operating systems & Components / Operating system package or component dtb-nvidia Operating systems & Components / Operating system package or component dtb-mediatek Operating systems & Components / Operating system package or component dtb-marvell Operating systems & Components / Operating system package or component dtb-lg Operating systems & Components / Operating system package or component dtb-hisilicon Operating systems & Components / Operating system package or component dtb-freescale Operating systems & Components / Operating system package or component dtb-exynos Operating systems & Components / Operating system package or component dtb-cavium Operating systems & Components / Operating system package or component dtb-broadcom Operating systems & Components / Operating system package or component dtb-arm Operating systems & Components / Operating system package or component dtb-apm Operating systems & Components / Operating system package or component dtb-amlogic Operating systems & Components / Operating system package or component dtb-amd Operating systems & Components / Operating system package or component dtb-altera Operating systems & Components / Operating system package or component dtb-allwinner Operating systems & Components / Operating system package or component dlm-kmp-64kb-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-64kb Operating systems & Components / Operating system package or component cluster-md-kmp-64kb-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-64kb Operating systems & Components / Operating system package or component kernel-kvmsmall-livepatch-devel Operating systems & Components / Operating system package or component kernel-kvmsmall-devel-debuginfo Operating systems & Components / Operating system package or component kernel-kvmsmall-devel Operating systems & Components / Operating system package or component kernel-kvmsmall-debugsource Operating systems & Components / Operating system package or component kernel-kvmsmall-debuginfo Operating systems & Components / Operating system package or component kernel-kvmsmall Operating systems & Components / Operating system package or component kernel-debug-livepatch-devel Operating systems & Components / Operating system package or component kernel-debug-devel-debuginfo Operating systems & Components / Operating system package or component kernel-debug-devel Operating systems & Components / Operating system package or component kernel-debug-debugsource Operating systems & Components / Operating system package or component kernel-debug-debuginfo Operating systems & Components / Operating system package or component kernel-debug Operating systems & Components / Operating system package or component reiserfs-kmp-default-debuginfo Operating systems & Components / Operating system package or component reiserfs-kmp-default Operating systems & Components / Operating system package or component ocfs2-kmp-default-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-default Operating systems & Components / Operating system package or component kselftests-kmp-default-debuginfo Operating systems & Components / Operating system package or component kselftests-kmp-default Operating systems & Components / Operating system package or component kernel-syms Operating systems & Components / Operating system package or component kernel-obs-qa Operating systems & Components / Operating system package or component kernel-obs-build-debugsource Operating systems & Components / Operating system package or component kernel-obs-build Operating systems & Components / Operating system package or component kernel-default-optional-debuginfo Operating systems & Components / Operating system package or component kernel-default-optional Operating systems & Components / Operating system package or component kernel-default-livepatch-devel Operating systems & Components / Operating system package or component kernel-default-livepatch Operating systems & Components / Operating system package or component kernel-default-extra-debuginfo Operating systems & Components / Operating system package or component kernel-default-extra Operating systems & Components / Operating system package or component kernel-default-devel-debuginfo Operating systems & Components / Operating system package or component kernel-default-devel Operating systems & Components / Operating system package or component kernel-default-debugsource Operating systems & Components / Operating system package or component kernel-default-debuginfo Operating systems & Components / Operating system package or component kernel-default-base-rebuild Operating systems & Components / Operating system package or component kernel-default-base Operating systems & Components / Operating system package or component kernel-default Operating systems & Components / Operating system package or component gfs2-kmp-default-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-default Operating systems & Components / Operating system package or component dlm-kmp-default-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-default Operating systems & Components / Operating system package or component cluster-md-kmp-default-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-default Operating systems & Components / Operating system package or component dtb-zte Operating systems & Components / Operating system package or component dtb-al Operating systems & Components / Operating system package or component reiserfs-kmp-preempt-debuginfo Operating systems & Components / Operating system package or component reiserfs-kmp-preempt Operating systems & Components / Operating system package or component ocfs2-kmp-preempt-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-preempt Operating systems & Components / Operating system package or component kselftests-kmp-preempt-debuginfo Operating systems & Components / Operating system package or component kselftests-kmp-preempt Operating systems & Components / Operating system package or component kernel-preempt-optional-debuginfo Operating systems & Components / Operating system package or component kernel-preempt-optional Operating systems & Components / Operating system package or component kernel-preempt-livepatch-devel Operating systems & Components / Operating system package or component kernel-preempt-extra-debuginfo Operating systems & Components / Operating system package or component kernel-preempt-extra Operating systems & Components / Operating system package or component kernel-preempt-devel-debuginfo Operating systems & Components / Operating system package or component kernel-preempt-devel Operating systems & Components / Operating system package or component kernel-preempt-debugsource Operating systems & Components / Operating system package or component kernel-preempt-debuginfo Operating systems & Components / Operating system package or component kernel-preempt Operating systems & Components / Operating system package or component gfs2-kmp-preempt-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-preempt Operating systems & Components / Operating system package or component dlm-kmp-preempt-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-preempt Operating systems & Components / Operating system package or component cluster-md-kmp-preempt-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-preempt Operating systems & Components / Operating system package or component |
Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 15 vulnerabilities.
EUVDB-ID: #VU63422
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-45868
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial-of-service attack.
The vulnerability exists due to fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). A local user can trigger use-after-free error and perform a denial-of-service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63423
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-0850
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output in the copy_page_to_iter() function in iov_iter.c in Linux kernel. A local user can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63427
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-0854
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due memory leak in the Linux kernel’s DMA subsystem when processing DMA_FROM_DEVICE calls. A local user can trigger a memory leak error and read random memory from the kernel space.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63386
Risk: Low
CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2022-1011
CWE-ID:
CWE-416 - Use After Free
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in the write() function of FUSE filesystem. A local user can retireve (partial) /etc/shadow hashes and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU62028
Risk: Low
CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1016
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a use-after-free error in net/netfilter/nf_tables_core.c:nft_do_chain in Linux kernel.. A local user can trigger a use-after-free error and gain access to sensitive information.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63428
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1048
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to a use-after-free error in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. A local user can execute arbitrary code with elevated privileges and perform a denial-of-service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61765
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1055
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the tc_new_tfilter in Linux kernel. A local user can run a specially crafted program to trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63430
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1195
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service attack.
The vulnerability exists due to a use-after-free error in the drivers/net/hamradio. A local user can cause a denial of service (DOS) when the mkiss or sixpack device is detached.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63431
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1198
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service attack.
The vulnerability exists due to a use-after-free error in the drivers/net/hamradio/6pack.c. A local user can perform a denial of service (DoS) attack by simulating Amateur Radio.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63432
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1199
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a Null pointer dereference and use after free errors in the ax25_release() function. A local user can simulate Amateur Radio and perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63433
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1205
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a null pointer dereference and use after free errors in the net/ax25/ax25_timer.c. A local user can simulate Amateur Radio and perform a denial of service (DoS) attack.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61672
Risk: Low
CVSSv4.0: 6.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2022-27666
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c in Linux kernel. A local unprivileged user can pass specially crafted data to the system, trigger a heap-based buffer overflow and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU63160
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-28388
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to boundary error in the usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c. A local user can pass specially crafted data to the application, trigger double free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63162
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-28389
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to boundary error in mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c. A local user can pass specially crafted data to the application, trigger double free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63164
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-28390
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to boundary error in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c. A local user can pass specially crafted data to the application, trigger double free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server: 11-SP4-LTSS-EXTREME-CORE - 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications: 12-SP4 - 15-SP3
SUSE Manager Retail Branch Server: 4.2
SUSE Linux Enterprise Workstation Extension: 15-SP3
SUSE Linux Enterprise Module for Legacy Software: 15-SP3
SUSE Linux Enterprise Micro: 5.1 - 5.2
SUSE Linux Enterprise High Availability: 15-SP3
SUSE Linux Enterprise Desktop: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Module for Live Patching: 15-SP3
SUSE Linux Enterprise Module for Development Tools: 15-SP3
SUSE Linux Enterprise Module for Basesystem: 15-SP3
kernel-livepatch-5_3_18-150300_59_63-default: before 1-150300.7.3.1
kernel-zfcpdump-debugsource: before 5.3.18-150300.59.63.1
kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.63.1
kernel-zfcpdump: before 5.3.18-150300.59.63.1
kernel-source-vanilla: before 5.3.18-150300.59.63.1
kernel-source: before 5.3.18-150300.59.63.1
kernel-macros: before 5.3.18-150300.59.63.1
kernel-docs-html: before 5.3.18-150300.59.63.1
kernel-docs: before 5.3.18-150300.59.63.1
kernel-devel: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-64kb: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-64kb: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-optional: before 5.3.18-150300.59.63.1
kernel-64kb-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-extra: before 5.3.18-150300.59.63.1
kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb-devel: before 5.3.18-150300.59.63.1
kernel-64kb-debugsource: before 5.3.18-150300.59.63.1
kernel-64kb-debuginfo: before 5.3.18-150300.59.63.1
kernel-64kb: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-64kb: before 5.3.18-150300.59.63.1
dtb-xilinx: before 5.3.18-150300.59.63.1
dtb-sprd: before 5.3.18-150300.59.63.1
dtb-socionext: before 5.3.18-150300.59.63.1
dtb-rockchip: before 5.3.18-150300.59.63.1
dtb-renesas: before 5.3.18-150300.59.63.1
dtb-qcom: before 5.3.18-150300.59.63.1
dtb-nvidia: before 5.3.18-150300.59.63.1
dtb-mediatek: before 5.3.18-150300.59.63.1
dtb-marvell: before 5.3.18-150300.59.63.1
dtb-lg: before 5.3.18-150300.59.63.1
dtb-hisilicon: before 5.3.18-150300.59.63.1
dtb-freescale: before 5.3.18-150300.59.63.1
dtb-exynos: before 5.3.18-150300.59.63.1
dtb-cavium: before 5.3.18-150300.59.63.1
dtb-broadcom: before 5.3.18-150300.59.63.1
dtb-arm: before 5.3.18-150300.59.63.1
dtb-apm: before 5.3.18-150300.59.63.1
dtb-amlogic: before 5.3.18-150300.59.63.1
dtb-amd: before 5.3.18-150300.59.63.1
dtb-altera: before 5.3.18-150300.59.63.1
dtb-allwinner: before 5.3.18-150300.59.63.1
dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-64kb: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-64kb: before 5.3.18-150300.59.63.1
kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall-devel: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debugsource: before 5.3.18-150300.59.63.1
kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.63.1
kernel-kvmsmall: before 5.3.18-150300.59.63.1
kernel-debug-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-debug-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug-devel: before 5.3.18-150300.59.63.1
kernel-debug-debugsource: before 5.3.18-150300.59.63.1
kernel-debug-debuginfo: before 5.3.18-150300.59.63.1
kernel-debug: before 5.3.18-150300.59.63.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-default: before 5.3.18-150300.59.63.1
ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-default: before 5.3.18-150300.59.63.1
kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-default: before 5.3.18-150300.59.63.1
kernel-syms: before 5.3.18-150300.59.63.1
kernel-obs-qa: before 5.3.18-150300.59.63.1
kernel-obs-build-debugsource: before 5.3.18-150300.59.63.1
kernel-obs-build: before 5.3.18-150300.59.63.1
kernel-default-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-optional: before 5.3.18-150300.59.63.1
kernel-default-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-default-livepatch: before 5.3.18-150300.59.63.1
kernel-default-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-extra: before 5.3.18-150300.59.63.1
kernel-default-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-devel: before 5.3.18-150300.59.63.1
kernel-default-debugsource: before 5.3.18-150300.59.63.1
kernel-default-debuginfo: before 5.3.18-150300.59.63.1
kernel-default-base-rebuild: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default-base: before 5.3.18-150300.59.63.1.150300.18.39.1
kernel-default: before 5.3.18-150300.59.63.1
gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-default: before 5.3.18-150300.59.63.1
dlm-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-default: before 5.3.18-150300.59.63.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-default: before 5.3.18-150300.59.63.1
dtb-zte: before 5.3.18-150300.59.63.1
dtb-al: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
reiserfs-kmp-preempt: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
ocfs2-kmp-preempt: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
kselftests-kmp-preempt: before 5.3.18-150300.59.63.1
kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-optional: before 5.3.18-150300.59.63.1
kernel-preempt-livepatch-devel: before 5.3.18-150300.59.63.1
kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-extra: before 5.3.18-150300.59.63.1
kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt-devel: before 5.3.18-150300.59.63.1
kernel-preempt-debugsource: before 5.3.18-150300.59.63.1
kernel-preempt-debuginfo: before 5.3.18-150300.59.63.1
kernel-preempt: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
gfs2-kmp-preempt: before 5.3.18-150300.59.63.1
dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
dlm-kmp-preempt: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.63.1
cluster-md-kmp-preempt: before 5.3.18-150300.59.63.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.