SUSE update for the Linux Kernel

1) Improper locking

EUVDB-ID: #VU92051

Risk: Low

CVSSv3.1: 4.1 [AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46925

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the smc_wr_is_tx_pend(), smc_wr_tx_process_cqe(), smc_wr_reg_send() and smc_wr_free_link() functions in net/smc/smc_wr.c, within the smc_ib_modify_qp_rts() function in net/smc/smc_ib.c, within the smc_conn_free(), smcr_link_clear(), smc_conn_kill(), smc_smcd_terminate_all(), smc_smcr_terminate_all(), smcr_link_down() and init_waitqueue_head() functions in net/smc/smc_core.c, within the smc_cdc_tx_handler(), smc_cdc_msg_send(), smcr_cdc_msg_send_validation() and smc_cdc_get_slot_and_msg_send() functions in net/smc/smc_cdc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource management error

EUVDB-ID: #VU89253

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46926

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the sdw_intel_acpi_cb() function in sound/hda/intel-sdw-acpi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Reachable assertion

EUVDB-ID: #VU90917

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46927

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the ne_set_user_memory_region_ioctl() function in drivers/virt/nitro_enclaves/ne_misc_dev.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU90257

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46929

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the sctp_transport_lookup_process() and sctp_transport_get_idx() functions in net/sctp/socket.c, within the sctp_sock_dump() and sctp_sock_filter() functions in net/sctp/sctp_diag.c, within the sctp_endpoint_free() and sctp_endpoint_destroy() functions in net/sctp/endpointola.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU90258

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46930

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mtu3_alloc_request() function in drivers/usb/mtu3/mtu3_gadget.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Stack-based buffer overflow

EUVDB-ID: #VU91303

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46931

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to stack overflow within the mlx5e_tx_reporter_dump_sq() and mlx5e_reporter_tx_timeout() functions in drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU90259

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46933

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ffs_data_clear() and ffs_data_reset() functions in drivers/usb/gadget/function/f_fs.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU88892

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46936

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the inet_init() function in net/ipv4/af_inet.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Double Free

EUVDB-ID: #VU89391

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47082

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in drivers/net/tun.c. A local user can trigger a double free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Release of invalid pointer or reference

EUVDB-ID: #VU93003

Risk: Low

CVSSv3.1: 4.6 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47087

CWE-ID: CWE-763 - Release of invalid pointer or reference

Exploit availability: No

The vulnerability allows a local user to modify data on the system.

The vulnerability exists due to performance of perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. A local user can modify data on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Reachable assertion

EUVDB-ID: #VU90913

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47091

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the ieee80211_start_ap() function in net/mac80211/cfg.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Memory leak

EUVDB-ID: #VU90478

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47093

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the pmc_core_platform_init() function in drivers/platform/x86/intel_pmc_core_pltdrv.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU88107

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47094

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in arch/x86/kvm/mmu/tdp_iter.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) NULL pointer dereference

EUVDB-ID: #VU90633

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47095

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ssif_probe() function in drivers/char/ipmi/ipmi_ssif.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Use of uninitialized resource

EUVDB-ID: #VU91681

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47096

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the snd_rawmidi_open() function in sound/core/rawmidi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Out-of-bounds read

EUVDB-ID: #VU90344

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47097

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the elantech_change_report_id() function in drivers/input/mouse/elantech.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Integer overflow

EUVDB-ID: #VU91181

Risk: Low

CVSSv3.1: 6.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47098

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the lm90_set_temphyst() function in drivers/hwmon/lm90.c. A local user can execute arbitrary code.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU88856

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47099

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a missing security check within the veth_xdp_rcv() function in drivers/net/veth.c. A local user can gain access to sensitive information.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Use-after-free

EUVDB-ID: #VU90233

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47100

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cleanup_bmc_device() function in drivers/char/ipmi/ipmi_msghandler.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Use of uninitialized resource

EUVDB-ID: #VU90882

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47101

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the asix_check_host_enable() function in drivers/net/usb/asix_common.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Out-of-bounds read

EUVDB-ID: #VU90345

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47102

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the prestera_netdev_port_event() function in drivers/net/ethernet/marvell/prestera/prestera_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Memory leak

EUVDB-ID: #VU90019

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47104

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the qib_user_sdma_queue_pkts() function in drivers/infiniband/hw/qib/qib_user_sdma.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Memory leak

EUVDB-ID: #VU91655

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47105

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ice_xsk_any_rx_ring_ena() function in drivers/net/ethernet/intel/ice/ice_xsk.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Buffer overflow

EUVDB-ID: #VU91316

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47107

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the nfsd_proc_rmdir() and nfsd_init_dirlist_pages() functions in fs/nfsd/nfsproc.c, within the nfsd3_proc_link() and nfsd3_init_dirlist_pages() functions in fs/nfsd/nfs3proc.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) NULL pointer dereference

EUVDB-ID: #VU90632

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47108

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mtk_hdmi_bridge_mode_valid() function in drivers/gpu/drm/mediatek/mtk_hdmi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU64207

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-20154

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to unspecified error in the Linux Kernel. A local user can bypass security restrictions and escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Double Free

EUVDB-ID: #VU74053

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-4744

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the tun_free_netdev() function in the Linux kernel’s TUN/TAP device driver. A local user can trigger a double free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Use-after-free

EUVDB-ID: #VU90261

Risk: Low

CVSSv3.1: 6.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48626

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the moxart_remove() function in drivers/mmc/host/moxart-mmc.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Information disclosure

EUVDB-ID: #VU93004

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48629

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A local user can gain unauthorized access to sensitive information on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Infinite loop

EUVDB-ID: #VU91418

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48630

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the qcom_rng_read() function in drivers/crypto/qcom-rng.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Information disclosure

EUVDB-ID: #VU87457

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-28746

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors. A local user can gain access to sensitive information.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Use-after-free

EUVDB-ID: #VU82758

Risk: Low

CVSSv3.1: 6.1 [AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-35827

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local authenticated user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. A local authenticated user can trigger a use-after-free error and escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Use-after-free

EUVDB-ID: #VU87740

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52447

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in bpf. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU90661

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52450

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the discover_upi_topology() function in arch/x86/events/intel/uncore_snbep.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) NULL pointer dereference

EUVDB-ID: #VU89244

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52454

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the nvmet_tcp_build_pdu_iovec() function in drivers/nvme/target/tcp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Use-after-free

EUVDB-ID: #VU89235

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52469

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the kv_parse_power_table() function in drivers/gpu/drm/amd/amdgpu/kv_dpm.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.