SUSE update for the Linux Kernel

1) Improper locking

EUVDB-ID: #VU92051

Risk: Low

CVSSv3.1: 4.1 [AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46925

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the smc_wr_is_tx_pend(), smc_wr_tx_process_cqe(), smc_wr_reg_send() and smc_wr_free_link() functions in net/smc/smc_wr.c, within the smc_ib_modify_qp_rts() function in net/smc/smc_ib.c, within the smc_conn_free(), smcr_link_clear(), smc_conn_kill(), smc_smcd_terminate_all(), smc_smcr_terminate_all(), smcr_link_down() and init_waitqueue_head() functions in net/smc/smc_core.c, within the smc_cdc_tx_handler(), smc_cdc_msg_send(), smcr_cdc_msg_send_validation() and smc_cdc_get_slot_and_msg_send() functions in net/smc/smc_cdc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource management error

EUVDB-ID: #VU89253

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46926

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the sdw_intel_acpi_cb() function in sound/hda/intel-sdw-acpi.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Reachable assertion

EUVDB-ID: #VU90917

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46927

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the ne_set_user_memory_region_ioctl() function in drivers/virt/nitro_enclaves/ne_misc_dev.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU90257

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46929

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the sctp_transport_lookup_process() and sctp_transport_get_idx() functions in net/sctp/socket.c, within the sctp_sock_dump() and sctp_sock_filter() functions in net/sctp/sctp_diag.c, within the sctp_endpoint_free() and sctp_endpoint_destroy() functions in net/sctp/endpointola.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU90258

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46930

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mtu3_alloc_request() function in drivers/usb/mtu3/mtu3_gadget.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Stack-based buffer overflow

EUVDB-ID: #VU91303

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46931

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to stack overflow within the mlx5e_tx_reporter_dump_sq() and mlx5e_reporter_tx_timeout() functions in drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU90259

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46933

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ffs_data_clear() and ffs_data_reset() functions in drivers/usb/gadget/function/f_fs.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU88892

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46936

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the inet_init() function in net/ipv4/af_inet.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Double Free

EUVDB-ID: #VU89391

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47082

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in drivers/net/tun.c. A local user can trigger a double free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Release of invalid pointer or reference

EUVDB-ID: #VU93003

Risk: Low

CVSSv3.1: 4.6 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47087

CWE-ID: CWE-763 - Release of invalid pointer or reference

Exploit availability: No

Description

The vulnerability allows a local user to modify data on the system.

The vulnerability exists due to performance of perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. A local user can modify data on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Reachable assertion

EUVDB-ID: #VU90913

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47091

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the ieee80211_start_ap() function in net/mac80211/cfg.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Memory leak

EUVDB-ID: #VU90478

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47093

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the pmc_core_platform_init() function in drivers/platform/x86/intel_pmc_core_pltdrv.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU88107

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47094

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in arch/x86/kvm/mmu/tdp_iter.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) NULL pointer dereference

EUVDB-ID: #VU90633

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47095

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ssif_probe() function in drivers/char/ipmi/ipmi_ssif.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Use of uninitialized resource

EUVDB-ID: #VU91681

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47096

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the snd_rawmidi_open() function in sound/core/rawmidi.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Out-of-bounds read

EUVDB-ID: #VU90344

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47097

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the elantech_change_report_id() function in drivers/input/mouse/elantech.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Integer overflow

EUVDB-ID: #VU91181

Risk: Low

CVSSv3.1: 6.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47098

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the lm90_set_temphyst() function in drivers/hwmon/lm90.c. A local user can execute arbitrary code.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU88856

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47099

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a missing security check within the veth_xdp_rcv() function in drivers/net/veth.c. A local user can gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: before 5.14.21-150400.24.116.1

dtb-qcom: before 5.14.21-150400.24.116.1

dtb-lg: before 5.14.21-150400.24.116.1

dtb-allwinner: before 5.14.21-150400.24.116.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.116.1

dtb-arm: before 5.14.21-150400.24.116.1

kernel-64kb-optional: before 5.14.21-150400.24.116.1

dtb-mediatek: before 5.14.21-150400.24.116.1

kernel-64kb-extra: before 5.14.21-150400.24.116.1

dtb-amazon: before 5.14.21-150400.24.116.1

dtb-sprd: before 5.14.21-150400.24.116.1

dtb-amlogic: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb: before 5.14.21-150400.24.116.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-rockchip: before 5.14.21-150400.24.116.1

dtb-apple: before 5.14.21-150400.24.116.1

dtb-freescale: before 5.14.21-150400.24.116.1

dtb-socionext: before 5.14.21-150400.24.116.1

dtb-cavium: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

kernel-64kb-debugsource: before 5.14.21-150400.24.116.1

dtb-altera: before 5.14.21-150400.24.116.1

kernel-64kb-devel: before 5.14.21-150400.24.116.1

dtb-hisilicon: before 5.14.21-150400.24.116.1

dtb-apm: before 5.14.21-150400.24.116.1

dtb-renesas: before 5.14.21-150400.24.116.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-xilinx: before 5.14.21-150400.24.116.1

dtb-nvidia: before 5.14.21-150400.24.116.1

dtb-marvell: before 5.14.21-150400.24.116.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.116.1

dtb-amd: before 5.14.21-150400.24.116.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.116.1

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-exynos: before 5.14.21-150400.24.116.1

dlm-kmp-64kb: before 5.14.21-150400.24.116.1

dtb-broadcom: before 5.14.21-150400.24.116.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.116.1

dtb-aarch64: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.116.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.116.1

kernel-zfcpdump: before 5.14.21-150400.24.116.1

kernel-livepatch-5_14_21-150400_24_116-default: before 1-150400.9.5.1

kernel-livepatch-5_14_21-150400_24_116-default-debuginfo: before 1-150400.9.5.1

kernel-livepatch-SLE15-SP4_Update_25-debugsource: before 1-150400.9.5.1

kernel-kvmsmall: before 5.14.21-150400.24.116.1

kernel-default: before 5.14.21-150400.24.116.1

kselftests-kmp-default: before 5.14.21-150400.24.116.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

cluster-md-kmp-default: before 5.14.21-150400.24.116.1

dlm-kmp-default: before 5.14.21-150400.24.116.1

ocfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-debuginfo: before 5.14.21-150400.24.116.1

reiserfs-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.116.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra: before 5.14.21-150400.24.116.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional: before 5.14.21-150400.24.116.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-livepatch: before 5.14.21-150400.24.116.1

kernel-default-debugsource: before 5.14.21-150400.24.116.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.116.1

kernel-syms: before 5.14.21-150400.24.116.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-devel: before 5.14.21-150400.24.116.1

kernel-obs-qa: before 5.14.21-150400.24.116.1

kernel-obs-build: before 5.14.21-150400.24.116.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.116.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.116.1

gfs2-kmp-default: before 5.14.21-150400.24.116.1

kernel-default-base: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.116.1

kernel-default-base-rebuild: before 5.14.21-150400.24.116.1.150400.24.54.5

kernel-kvmsmall-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.116.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.116.1

kernel-debug-debugsource: before 5.14.21-150400.24.116.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug-devel: before 5.14.21-150400.24.116.1

kernel-debug-debuginfo: before 5.14.21-150400.24.116.1

kernel-debug: before 5.14.21-150400.24.116.1

kernel-macros: before 5.14.21-150400.24.116.1

kernel-docs-html: before 5.14.21-150400.24.116.1

kernel-source: before 5.14.21-150400.24.116.1

kernel-source-vanilla: before 5.14.21-150400.24.116.1

kernel-devel: before 5.14.21-150400.24.116.1

kernel-docs: before 5.14.21-150400.24.116.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-lg:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-arm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apple:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-altera:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-apm:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-amd:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150400_24_116-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp4_update_25-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-livepatch-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-debug:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20241321-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.