SUSE update for the Linux Kernel

1) Buffer overflow

EUVDB-ID: #VU93669

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47047

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the zynqmp_qspi_irq(), zynqmp_qspi_setuprxdma(), zynqmp_qspi_write_op(), zynqmp_qspi_exec_op() and zynqmp_qspi_probe() functions in drivers/spi/spi-zynqmp-gqspi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU92071

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47181

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the tusb_musb_init() function in drivers/usb/musb/tusb6010.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Buffer overflow

EUVDB-ID: #VU89395

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47182

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the scsi_mode_sense() function in drivers/scsi/scsi_lib.c. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU90586

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47183

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the lpfc_sli_issue_abort_iotag() function in drivers/scsi/lpfc/lpfc_sli.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) NULL pointer dereference

EUVDB-ID: #VU90587

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47184

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the i40e_sync_filters_subtask() and i40e_vsi_release() functions in drivers/net/ethernet/intel/i40e/i40e_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Improper locking

EUVDB-ID: #VU91528

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47185

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the flush_to_ldisc() function in drivers/tty/tty_buffer.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Improper locking

EUVDB-ID: #VU91527

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47187

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the arch/arm64/boot/dts/qcom/msm8998.dtsi. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Resource management error

EUVDB-ID: #VU93843

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47188

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ufshcd_abort() function in drivers/scsi/ufs/ufshcd.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Race condition

EUVDB-ID: #VU93380

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47189

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within the run_ordered_work() and normal_work_helper() functions in fs/btrfs/async-thread.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Out-of-bounds read

EUVDB-ID: #VU90325

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47191

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the resp_readcap16() function in drivers/scsi/scsi_debug.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) State Issues

EUVDB-ID: #VU89240

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47192

CWE-ID: CWE-371 - State Issues

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an error during iSCSI recovery within the store_state_field() function in drivers/scsi/scsi_sysfs.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Memory leak

EUVDB-ID: #VU90008

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47193

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the pm8001_init_ccb_tag(), pm8001_pci_remove() and remove() functions in drivers/scsi/pm8001/pm8001_init.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Improper initialization

EUVDB-ID: #VU92392

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47194

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to improper initialization error within the cfg80211_change_iface() function in net/wireless/util.c. A local user can execute arbitrary code.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Use-after-free

EUVDB-ID: #VU90204

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47195

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the spi_unregister_controller() function in drivers/spi/spi.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Use-after-free

EUVDB-ID: #VU90203

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47196

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the create_qp() function in drivers/infiniband/core/verbs.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) NULL pointer dereference

EUVDB-ID: #VU93057

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47197

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mlx5_debug_cq_remove() function in drivers/net/ethernet/mellanox/mlx5/core/debugfs.c, within the mlx5_core_destroy_cq() function in drivers/net/ethernet/mellanox/mlx5/core/cq.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Use-after-free

EUVDB-ID: #VU90208

Risk: Low

CVSSv3.1: 6.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47198

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the lpfc_mbx_cmpl_fc_reg_login() function in drivers/scsi/lpfc/lpfc_hbadisc.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Memory leak

EUVDB-ID: #VU90476

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47199

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the parse_tc_nic_actions() and parse_tc_fdb_actions() functions in drivers/net/ethernet/mellanox/mlx5/core/en_tc.c, within the mlx5_tc_ct_match_add(), mlx5_tc_ct_parse_action() and __mlx5_tc_ct_flow_offload_clear() functions in drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Use-after-free

EUVDB-ID: #VU90206

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47200

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the drm_gem_prime_mmap() function in drivers/gpu/drm/drm_prime.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Resource management error

EUVDB-ID: #VU92971

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47201

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the iavf_disable_vf() function in drivers/net/ethernet/intel/iavf/iavf_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) NULL pointer dereference

EUVDB-ID: #VU90582

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47202

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the of_thermal_get_temp(), of_thermal_set_emul_temp(), of_thermal_get_trend() and of_thermal_set_trip_temp() functions in drivers/thermal/of-thermal.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Buffer overflow

EUVDB-ID: #VU93156

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47203

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the lpfc_drain_txq() function in drivers/scsi/lpfc/lpfc_sli.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Use-after-free

EUVDB-ID: #VU90205

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47204

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the dpaa2_eth_remove() function in drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Memory leak

EUVDB-ID: #VU90007

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47205

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the DEFINE_SPINLOCK() and devm_sunxi_ccu_release() functions in drivers/clk/sunxi-ng/ccu_common.c, within the suniv_f1c100s_ccu_setup() function in drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c, within the sun9i_a80_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun9i-a80.c, within the sun9i_a80_usb_clk_probe() function in drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c, within the sun9i_a80_de_clk_probe() function in drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c, within the sun8i_v3_v3s_ccu_init() function in drivers/clk/sunxi-ng/ccu-sun8i-v3s.c, within the sun8i_r40_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun8i-r40.c, within the sunxi_h3_h5_ccu_init() function in drivers/clk/sunxi-ng/ccu-sun8i-h3.c, within the sunxi_de2_clk_probe() function in drivers/clk/sunxi-ng/ccu-sun8i-de2.c, within the sun8i_a83t_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun8i-a83t.c, within the sun8i_a33_ccu_setup() and ccu_pll_notifier_register() functions in drivers/clk/sunxi-ng/ccu-sun8i-a33.c, within the sun8i_a23_ccu_setup() function in drivers/clk/sunxi-ng/ccu-sun8i-a23.c, within the sun6i_a31_ccu_setup() function in drivers/clk/sunxi-ng/ccu-sun6i-a31.c, within the sun5i_ccu_init() function in drivers/clk/sunxi-ng/ccu-sun5i.c, within the sun50i_h616_ccu_setup() function in drivers/clk/sunxi-ng/ccu-sun50i-h616.c, within the sun50i_h6_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun50i-h6.c, within the sunxi_r_ccu_init() function in drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c, within the sun50i_a64_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun50i-a64.c, within the sun50i_a100_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun50i-a100.c, within the sun50i_a100_r_ccu_probe() function in drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c, within the sun4i_ccu_init() and sunxi_ccu_probe() functions in drivers/clk/sunxi-ng/ccu-sun4i-a10.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) NULL pointer dereference

EUVDB-ID: #VU92072

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47206

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ohci_hcd_tmio_drv_probe() function in drivers/usb/host/ohci-tmio.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) NULL pointer dereference

EUVDB-ID: #VU90583

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47207

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the snd_gf1_dma_interrupt() function in sound/isa/gus/gus_dma.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Use-after-free

EUVDB-ID: #VU90207

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47209

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rq_of_rt_se() and rt_rq_of_se() functions in kernel/sched/rt.c, within the free_fair_sched_group() and unregister_fair_sched_group() functions in kernel/sched/fair.c, within the sched_free_group(), sched_online_group(), cpu_cgroup_css_released() and cpu_cgroup_css_free() functions in kernel/sched/core.c, within the autogroup_destroy() function in kernel/sched/autogroup.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Input validation error

EUVDB-ID: #VU93688

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47210

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the tps6598x_block_read() function in drivers/usb/typec/tps6598x.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) NULL pointer dereference

EUVDB-ID: #VU89394

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47211

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the snd_usb_set_sample_rate_v2v3() function in sound/usb/clock.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Error Handling

EUVDB-ID: #VU89241

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47212

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect error handling within the mlx5_internal_err_ret_value() function in drivers/net/ethernet/mellanox/mlx5/core/cmd.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Buffer overflow

EUVDB-ID: #VU93157

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47215

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the DECLARE_BITMAP(), resync_handle_seq_match(), mlx5e_ktls_add_rx() and mlx5e_ktls_rx_handle_resync_list() functions in drivers/net/ethernet/mellanox/mlx5/core/en_accel/ktls_rx.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Memory leak

EUVDB-ID: #VU91648

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47216

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the asc_prt_adv_board_info() function in drivers/scsi/advansys.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) NULL pointer dereference

EUVDB-ID: #VU90584

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47217

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the set_hv_tscchange_cb() function in arch/x86/hyperv/hv_init.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU90585

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47218

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the hashtab_compute_size() function in security/selinux/ss/hashtab.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Out-of-bounds read

EUVDB-ID: #VU90324

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47219

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the resp_report_tgtpgs() function in drivers/scsi/scsi_debug.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Server 15 SP4 LTSS: 15-SP4

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Desktop 15 SP4 LTSS: 15-SP4

openSUSE Leap Micro: 5.3 - 5.4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

cluster-md-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-extra: before 5.14.21-150400.24.119.1

dtb-allwinner: before 5.14.21-150400.24.119.1

kernel-64kb-optional: before 5.14.21-150400.24.119.1

kernel-64kb-optional-debuginfo: before 5.14.21-150400.24.119.1

dtb-sprd: before 5.14.21-150400.24.119.1

dtb-qcom: before 5.14.21-150400.24.119.1

dtb-apple: before 5.14.21-150400.24.119.1

dtb-cavium: before 5.14.21-150400.24.119.1

kernel-64kb-extra-debuginfo: before 5.14.21-150400.24.119.1

dtb-exynos: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-amd: before 5.14.21-150400.24.119.1

dtb-broadcom: before 5.14.21-150400.24.119.1

dtb-hisilicon: before 5.14.21-150400.24.119.1

dtb-amlogic: before 5.14.21-150400.24.119.1

cluster-md-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-xilinx: before 5.14.21-150400.24.119.1

dtb-socionext: before 5.14.21-150400.24.119.1

dtb-lg: before 5.14.21-150400.24.119.1

dtb-altera: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-renesas: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dlm-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-marvell: before 5.14.21-150400.24.119.1

dtb-arm: before 5.14.21-150400.24.119.1

reiserfs-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-amazon: before 5.14.21-150400.24.119.1

dtb-mediatek: before 5.14.21-150400.24.119.1

kernel-64kb-livepatch-devel: before 5.14.21-150400.24.119.1

ocfs2-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-apm: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb-debuginfo: before 5.14.21-150400.24.119.1

dtb-freescale: before 5.14.21-150400.24.119.1

kselftests-kmp-64kb: before 5.14.21-150400.24.119.1

dtb-rockchip: before 5.14.21-150400.24.119.1

dtb-nvidia: before 5.14.21-150400.24.119.1

dtb-aarch64: before 5.14.21-150400.24.119.1

kernel-kvmsmall: before 5.14.21-150400.24.119.1

kselftests-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kselftests-kmp-default: before 5.14.21-150400.24.119.1

kernel-default-optional: before 5.14.21-150400.24.119.1

kernel-default-optional-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-qa: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-base-rebuild: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-kvmsmall-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel: before 5.14.21-150400.24.119.1

kernel-kvmsmall-debugsource: before 5.14.21-150400.24.119.1

kernel-kvmsmall-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug-devel: before 5.14.21-150400.24.119.1

kernel-debug-debugsource: before 5.14.21-150400.24.119.1

kernel-debug-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-debug-debuginfo: before 5.14.21-150400.24.119.1

kernel-debug: before 5.14.21-150400.24.119.1

kernel-docs-html: before 5.14.21-150400.24.119.1

kernel-source-vanilla: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debuginfo: before 5.14.21-150400.24.119.1

kernel-zfcpdump-debugsource: before 5.14.21-150400.24.119.1

kernel-zfcpdump: before 5.14.21-150400.24.119.1

kernel-default-extra-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-extra: before 5.14.21-150400.24.119.1

kernel-docs: before 5.14.21-150400.24.119.1

kernel-source: before 5.14.21-150400.24.119.1

kernel-macros: before 5.14.21-150400.24.119.1

kernel-devel: before 5.14.21-150400.24.119.1

kernel-obs-build-debugsource: before 5.14.21-150400.24.119.1

reiserfs-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-obs-build: before 5.14.21-150400.24.119.1

kernel-default-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-devel: before 5.14.21-150400.24.119.1

reiserfs-kmp-default: before 5.14.21-150400.24.119.1

kernel-syms: before 5.14.21-150400.24.119.1

kernel-64kb-debugsource: before 5.14.21-150400.24.119.1

kernel-64kb-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel-debuginfo: before 5.14.21-150400.24.119.1

kernel-64kb-devel: before 5.14.21-150400.24.119.1

kernel-64kb: before 5.14.21-150400.24.119.1

dlm-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default: before 5.14.21-150400.24.119.1

dlm-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

ocfs2-kmp-default: before 5.14.21-150400.24.119.1

cluster-md-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

gfs2-kmp-default: before 5.14.21-150400.24.119.1

ocfs2-kmp-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default-debuginfo: before 1-150400.9.3.1

kernel-default-livepatch: before 5.14.21-150400.24.119.1

kernel-livepatch-5_14_21-150400_24_119-default: before 1-150400.9.3.1

kernel-livepatch-SLE15-SP4_Update_26-debugsource: before 1-150400.9.3.1

kernel-default-livepatch-devel: before 5.14.21-150400.24.119.1

kernel-default-debuginfo: before 5.14.21-150400.24.119.1

kernel-default-debugsource: before 5.14.21-150400.24.119.1

kernel-default-base: before 5.14.21-150400.24.119.1.150400.24.56.1

kernel-default: before 5.14.21-150400.24.119.1

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:

http://www.suse.com/support/update/announcement/2024/suse-su-20241641-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Improper locking

EUVDB-ID: #VU92033

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48631

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the __ext4_ext_check() function in fs/ext4/extents.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.