SUSE update for the Linux Kernel



Risk Medium
Patch available YES
Number of vulnerabilities 62
CVE-ID CVE-2021-4441
CVE-2022-0854
CVE-2022-20368
CVE-2022-28748
CVE-2022-2964
CVE-2022-48686
CVE-2022-48775
CVE-2022-48778
CVE-2022-48787
CVE-2022-48788
CVE-2022-48789
CVE-2022-48790
CVE-2022-48791
CVE-2022-48798
CVE-2022-48802
CVE-2022-48805
CVE-2022-48811
CVE-2022-48823
CVE-2022-48824
CVE-2022-48827
CVE-2022-48834
CVE-2022-48835
CVE-2022-48836
CVE-2022-48837
CVE-2022-48838
CVE-2022-48839
CVE-2022-48843
CVE-2022-48851
CVE-2022-48853
CVE-2022-48856
CVE-2022-48857
CVE-2022-48858
CVE-2022-48872
CVE-2022-48873
CVE-2022-48901
CVE-2022-48905
CVE-2022-48912
CVE-2022-48917
CVE-2022-48919
CVE-2022-48925
CVE-2022-48926
CVE-2022-48928
CVE-2022-48930
CVE-2022-48933
CVE-2022-48934
CVE-2023-1582
CVE-2023-2176
CVE-2023-52854
CVE-2024-26583
CVE-2024-26584
CVE-2024-26800
CVE-2024-40910
CVE-2024-41009
CVE-2024-41011
CVE-2024-41062
CVE-2024-42077
CVE-2024-42232
CVE-2024-42271
CVE-2024-43861
CVE-2024-43882
CVE-2024-43883
CVE-2024-44947
CWE-ID CWE-476
CWE-401
CWE-125
CWE-787
CWE-416
CWE-20
CWE-388
CWE-682
CWE-119
CWE-399
CWE-667
CWE-190
CWE-362
Exploitation vector Network
Public exploit Public exploit code for vulnerability #62 is available.
Vulnerable software
SUSE Linux Enterprise Live Patching
Operating systems & Components / Operating system

SUSE Linux Enterprise Micro for Rancher
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux
Operating systems & Components / Operating system

SUSE Linux Enterprise High Availability Extension 15
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications 15
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 15 SP3 LTSS
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 15
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing LTSS 15
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing 15
Operating systems & Components / Operating system

SUSE Enterprise Storage
Operating systems & Components / Operating system

SUSE Manager Retail Branch Server
Operating systems & Components / Operating system

SUSE Linux Enterprise Micro
Operating systems & Components / Operating system

openSUSE Leap
Operating systems & Components / Operating system

SUSE Manager Server
Operating systems & Components / Operating system

SUSE Manager Proxy
Operating systems & Components / Operating system

kernel-64kb
Operating systems & Components / Operating system package or component

dtb-amlogic
Operating systems & Components / Operating system package or component

kernel-64kb-debuginfo
Operating systems & Components / Operating system package or component

dtb-qcom
Operating systems & Components / Operating system package or component

kernel-64kb-debugsource
Operating systems & Components / Operating system package or component

dtb-hisilicon
Operating systems & Components / Operating system package or component

kernel-64kb-livepatch-devel
Operating systems & Components / Operating system package or component

dlm-kmp-64kb-debuginfo
Operating systems & Components / Operating system package or component

dtb-nvidia
Operating systems & Components / Operating system package or component

dtb-broadcom
Operating systems & Components / Operating system package or component

dtb-altera
Operating systems & Components / Operating system package or component

kernel-64kb-devel
Operating systems & Components / Operating system package or component

gfs2-kmp-64kb-debuginfo
Operating systems & Components / Operating system package or component

ocfs2-kmp-64kb
Operating systems & Components / Operating system package or component

kernel-64kb-extra-debuginfo
Operating systems & Components / Operating system package or component

dtb-amd
Operating systems & Components / Operating system package or component

dtb-mediatek
Operating systems & Components / Operating system package or component

dtb-xilinx
Operating systems & Components / Operating system package or component

dlm-kmp-64kb
Operating systems & Components / Operating system package or component

gfs2-kmp-64kb
Operating systems & Components / Operating system package or component

dtb-arm
Operating systems & Components / Operating system package or component

dtb-rockchip
Operating systems & Components / Operating system package or component

ocfs2-kmp-64kb-debuginfo
Operating systems & Components / Operating system package or component

dtb-cavium
Operating systems & Components / Operating system package or component

dtb-marvell
Operating systems & Components / Operating system package or component

dtb-allwinner
Operating systems & Components / Operating system package or component

kselftests-kmp-64kb-debuginfo
Operating systems & Components / Operating system package or component

dtb-sprd
Operating systems & Components / Operating system package or component

kselftests-kmp-64kb
Operating systems & Components / Operating system package or component

dtb-exynos
Operating systems & Components / Operating system package or component

kernel-64kb-optional-debuginfo
Operating systems & Components / Operating system package or component

dtb-renesas
Operating systems & Components / Operating system package or component

kernel-64kb-devel-debuginfo
Operating systems & Components / Operating system package or component

reiserfs-kmp-64kb
Operating systems & Components / Operating system package or component

cluster-md-kmp-64kb
Operating systems & Components / Operating system package or component

dtb-al
Operating systems & Components / Operating system package or component

dtb-apm
Operating systems & Components / Operating system package or component

cluster-md-kmp-64kb-debuginfo
Operating systems & Components / Operating system package or component

dtb-zte
Operating systems & Components / Operating system package or component

kernel-64kb-optional
Operating systems & Components / Operating system package or component

dtb-lg
Operating systems & Components / Operating system package or component

dtb-freescale
Operating systems & Components / Operating system package or component

reiserfs-kmp-64kb-debuginfo
Operating systems & Components / Operating system package or component

kernel-64kb-extra
Operating systems & Components / Operating system package or component

dtb-socionext
Operating systems & Components / Operating system package or component

dtb-aarch64
Operating systems & Components / Operating system package or component

kernel-zfcpdump-debuginfo
Operating systems & Components / Operating system package or component

kernel-zfcpdump-debugsource
Operating systems & Components / Operating system package or component

kernel-zfcpdump
Operating systems & Components / Operating system package or component

kernel-preempt
Operating systems & Components / Operating system package or component

dlm-kmp-preempt-debuginfo
Operating systems & Components / Operating system package or component

cluster-md-kmp-preempt-debuginfo
Operating systems & Components / Operating system package or component

reiserfs-kmp-preempt
Operating systems & Components / Operating system package or component

kernel-preempt-extra-debuginfo
Operating systems & Components / Operating system package or component

kselftests-kmp-preempt-debuginfo
Operating systems & Components / Operating system package or component

cluster-md-kmp-preempt
Operating systems & Components / Operating system package or component

kernel-preempt-optional-debuginfo
Operating systems & Components / Operating system package or component

ocfs2-kmp-preempt
Operating systems & Components / Operating system package or component

dlm-kmp-preempt
Operating systems & Components / Operating system package or component

reiserfs-kmp-preempt-debuginfo
Operating systems & Components / Operating system package or component

kselftests-kmp-preempt
Operating systems & Components / Operating system package or component

gfs2-kmp-preempt
Operating systems & Components / Operating system package or component

kernel-preempt-devel
Operating systems & Components / Operating system package or component

kernel-preempt-debugsource
Operating systems & Components / Operating system package or component

ocfs2-kmp-preempt-debuginfo
Operating systems & Components / Operating system package or component

kernel-preempt-optional
Operating systems & Components / Operating system package or component

kernel-preempt-livepatch-devel
Operating systems & Components / Operating system package or component

kernel-preempt-extra
Operating systems & Components / Operating system package or component

gfs2-kmp-preempt-debuginfo
Operating systems & Components / Operating system package or component

kernel-preempt-devel-debuginfo
Operating systems & Components / Operating system package or component

kernel-preempt-debuginfo
Operating systems & Components / Operating system package or component

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo
Operating systems & Components / Operating system package or component

kernel-livepatch-5_3_18-150300_59_174-preempt
Operating systems & Components / Operating system package or component

kernel-livepatch-SLE15-SP3_Update_48-debugsource
Operating systems & Components / Operating system package or component

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-livepatch-5_3_18-150300_59_174-default
Operating systems & Components / Operating system package or component

kernel-default
Operating systems & Components / Operating system package or component

kernel-default-base-rebuild
Operating systems & Components / Operating system package or component

gfs2-kmp-default-debuginfo
Operating systems & Components / Operating system package or component

kselftests-kmp-default
Operating systems & Components / Operating system package or component

kernel-default-optional-debuginfo
Operating systems & Components / Operating system package or component

dlm-kmp-default
Operating systems & Components / Operating system package or component

kernel-default-devel-debuginfo
Operating systems & Components / Operating system package or component

reiserfs-kmp-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-obs-build-debugsource
Operating systems & Components / Operating system package or component

kernel-default-devel
Operating systems & Components / Operating system package or component

kernel-syms
Operating systems & Components / Operating system package or component

ocfs2-kmp-default
Operating systems & Components / Operating system package or component

kernel-default-debugsource
Operating systems & Components / Operating system package or component

kernel-default-extra
Operating systems & Components / Operating system package or component

kselftests-kmp-default-debuginfo
Operating systems & Components / Operating system package or component

cluster-md-kmp-default-debuginfo
Operating systems & Components / Operating system package or component

cluster-md-kmp-default
Operating systems & Components / Operating system package or component

ocfs2-kmp-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-obs-qa
Operating systems & Components / Operating system package or component

dlm-kmp-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-default-debuginfo
Operating systems & Components / Operating system package or component

gfs2-kmp-default
Operating systems & Components / Operating system package or component

kernel-default-livepatch-devel
Operating systems & Components / Operating system package or component

kernel-default-base
Operating systems & Components / Operating system package or component

kernel-default-optional
Operating systems & Components / Operating system package or component

kernel-obs-build
Operating systems & Components / Operating system package or component

kernel-default-extra-debuginfo
Operating systems & Components / Operating system package or component

kernel-default-livepatch
Operating systems & Components / Operating system package or component

reiserfs-kmp-default
Operating systems & Components / Operating system package or component

kernel-debug-devel
Operating systems & Components / Operating system package or component

kernel-debug-livepatch-devel
Operating systems & Components / Operating system package or component

kernel-kvmsmall-debugsource
Operating systems & Components / Operating system package or component

kernel-kvmsmall-devel
Operating systems & Components / Operating system package or component

kernel-kvmsmall-debuginfo
Operating systems & Components / Operating system package or component

kernel-kvmsmall-devel-debuginfo
Operating systems & Components / Operating system package or component

kernel-kvmsmall-livepatch-devel
Operating systems & Components / Operating system package or component

kernel-debug-debuginfo
Operating systems & Components / Operating system package or component

kernel-debug-devel-debuginfo
Operating systems & Components / Operating system package or component

kernel-debug-debugsource
Operating systems & Components / Operating system package or component

kernel-kvmsmall
Operating systems & Components / Operating system package or component

kernel-debug
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

kernel-macros
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

kernel-docs-html
Operating systems & Components / Operating system package or component

kernel-source-vanilla
Operating systems & Components / Operating system package or component

kernel-docs
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 62 vulnerabilities.

1) NULL pointer dereference

EUVDB-ID: #VU96419

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4441

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the zynq_qspi_exec_mem_op() function in drivers/spi/spi-zynq-qspi.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Memory leak

EUVDB-ID: #VU63427

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0854

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due memory leak in the Linux kernel’s DMA subsystem when processing DMA_FROM_DEVICE calls. A local user can trigger a memory leak error and read random memory from the kernel space.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU67473

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-20368

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary condition within the packet_recvmsg() function in Linux kernel. A local user can trigger an out-of-bounds read error and potentially escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Memory leak

EUVDB-ID: #VU63419

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-28748

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists due memory leak when working with ax88179_178a devices. An attacker with physical access to the system can inject a malicious USB-drive and remotely obtain data from kernel memory.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Out-of-bounds write

EUVDB-ID: #VU67811

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-2964

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices driver in Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Use-after-free

EUVDB-ID: #VU90175

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48686

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nvme_tcp_io_work() function in drivers/nvme/host/tcp.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Memory leak

EUVDB-ID: #VU94408

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48775

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the vmbus_add_channel_kobj() function in drivers/hv/vmbus_drv.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Memory leak

EUVDB-ID: #VU94407

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48778

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the gpmi_nfc_exec_op() and pm_runtime_mark_last_busy() functions in drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use-after-free

EUVDB-ID: #VU94425

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48787

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the iwl_req_fw_callback() function in drivers/net/wireless/intel/iwlwifi/iwl-drv.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Use-after-free

EUVDB-ID: #VU94424

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48788

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nvme_rdma_error_recovery_work() function in drivers/nvme/host/rdma.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Use-after-free

EUVDB-ID: #VU94423

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48789

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nvme_tcp_error_recovery_work() function in drivers/nvme/host/tcp.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Use-after-free

EUVDB-ID: #VU94422

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48790

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nvme_async_event_work() function in drivers/nvme/host/core.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU94421

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48791

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the pm8001_exec_internal_tmf_task() function in drivers/scsi/pm8001/pm8001_sas.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Input validation error

EUVDB-ID: #VU94490

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48798

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the io_subchannel_chp_event() function in drivers/s390/cio/device.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Improper error handling

EUVDB-ID: #VU94460

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48802

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the smaps_page_accumulate(), smaps_account(), smaps_pte_entry(), smaps_pmd_entry(), pte_to_pagemap_entry() and pagemap_pmd_range() functions in fs/proc/task_mmu.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Out-of-bounds read

EUVDB-ID: #VU94432

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48805

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the ax88179_rx_fixup() function in drivers/net/usb/ax88179_178a.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) NULL pointer dereference

EUVDB-ID: #VU94444

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48811

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the init_crq_queue(), __ibmvnic_open() and ibmvnic_open() functions in drivers/net/ethernet/ibm/ibmvnic.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Incorrect calculation

EUVDB-ID: #VU94488

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48823

CWE-ID: CWE-682 - Incorrect Calculation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect calculation within the qedf_initiate_cleanup() function in drivers/scsi/qedf/qedf_io.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) NULL pointer dereference

EUVDB-ID: #VU94445

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48824

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the myrs_cleanup() function in drivers/scsi/myrs.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Buffer overflow

EUVDB-ID: #VU94479

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48827

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the nfsd4_encode_read() and nfsd4_encode_read_plus() functions in fs/nfsd/nfs4xdr.c, within the nfsd4_read() function in fs/nfsd/nfs4proc.c, within the nfsd3_proc_read() function in fs/nfsd/nfs3proc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Resource management error

EUVDB-ID: #VU94481

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48834

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the usbtmc_ioctl_request() function in drivers/usb/class/usbtmc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Improper locking

EUVDB-ID: #VU94448

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48835

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the mpt3sas_base_sync_reply_irqs() function in drivers/scsi/mpt3sas/mpt3sas_base.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Improper locking

EUVDB-ID: #VU94447

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48836

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the aiptek_probe() function in drivers/input/tablet/aiptek.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Integer overflow

EUVDB-ID: #VU94465

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48837

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the rndis_set_response() function in drivers/usb/gadget/function/rndis.c. A local user can execute arbitrary code.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Use-after-free

EUVDB-ID: #VU94415

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48838

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the usb_gadget_remove_driver(), udc_bind_to_driver() and dev_err() functions in drivers/usb/gadget/udc/core.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Memory leak

EUVDB-ID: #VU94392

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48839

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the tpacket_rcv() and packet_recvmsg() functions in net/packet/af_packet.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) NULL pointer dereference

EUVDB-ID: #VU94436

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48843

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the EXPORT_SYMBOL() function in drivers/gpu/drm/drm_connector.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Use-after-free

EUVDB-ID: #VU94414

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48851

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the tx_complete() function in drivers/staging/gdm724x/gdm_lte.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Memory leak

EUVDB-ID: #VU94397

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48853

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the Documentation/DMA-attributes.txt, include/linux/dma-mapping.h, lib/swiotlb.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Memory leak

EUVDB-ID: #VU94396

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48856

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the gfar_get_ts_info() function in drivers/net/ethernet/freescale/gianfar_ethtool.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Use-after-free

EUVDB-ID: #VU94412

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48857

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nfc_digital_free_device() function in drivers/nfc/port100.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Use-after-free

EUVDB-ID: #VU94411

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48858

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cmd_alloc_index() and cmd_ent_get() functions in drivers/net/ethernet/mellanox/mlx5/core/cmd.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Use-after-free

EUVDB-ID: #VU96329

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48872

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the fastrpc_map_put() function in drivers/misc/fastrpc.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) Use-after-free

EUVDB-ID: #VU96330

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48873

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the fastrpc_free_map(), fastrpc_buf_free() and fastrpc_device_release() functions in drivers/misc/fastrpc.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Improper locking

EUVDB-ID: #VU96434

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48901

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the btrfs_maybe_wake_unfinished_drop() and btrfs_add_dead_root() functions in fs/btrfs/transaction.c, within the btrfs_find_orphan_roots() function in fs/btrfs/root-tree.c, within the btrfs_relocate_block_group() function in fs/btrfs/relocation.c, within the btrfs_drop_snapshot() and btrfs_free_path() functions in fs/btrfs/extent-tree.c, within the open_ctree() and close_ctree() functions in fs/btrfs/disk-io.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Memory leak

EUVDB-ID: #VU96404

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48905

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ibmvnic_reset() function in drivers/net/ethernet/ibm/ibmvnic.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Use-after-free

EUVDB-ID: #VU96411

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48912

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nf_register_net_hook() function in net/netfilter/core.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Resource management error

EUVDB-ID: #VU96442

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48917

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the snd_soc_put_volsw() function in sound/soc/soc-ops.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Use-after-free

EUVDB-ID: #VU96413

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48919

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cifs_do_mount() function in fs/cifs/cifsfs.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Use-after-free

EUVDB-ID: #VU96414

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48925

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cma_bind_addr() function in drivers/infiniband/core/cma.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Improper locking

EUVDB-ID: #VU96426

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48926

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the rndis_register(), rndis_free_response(), rndis_get_next_response() and rndis_add_response() functions in drivers/usb/gadget/function/rndis.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Memory leak

EUVDB-ID: #VU96400

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48928

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the men_z188_probe() function in drivers/iio/adc/men_z188_adc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

43) Improper locking

EUVDB-ID: #VU96427

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48930

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the srp_remove_one() function in drivers/infiniband/ulp/srp/ib_srp.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Memory leak

EUVDB-ID: #VU96401

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48933

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the nf_tables_updobj(), nft_obj_commit_update() and __nf_tables_abort() functions in net/netfilter/nf_tables_api.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

45) Memory leak

EUVDB-ID: #VU96402

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48934

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the nfp_tunnel_add_shared_mac() and kfree() functions in drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

46) Race condition

EUVDB-ID: #VU74629

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1582

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within fs/proc/task_mmu.c. A local user can exploit the race and crash the kernel.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

47) Out-of-bounds read

EUVDB-ID: #VU75995

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-2176

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the compare_netdev_and_ip() function in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. A local user can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

48) Use-after-free

EUVDB-ID: #VU90083

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52854

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the EXPORT_SYMBOL() function in kernel/padata.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

49) Race condition

EUVDB-ID: #VU87596

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-26583

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition between async notify and socket close in TLS implementation in net/tls/tls_sw.c. A remote attacker can send specially crafted traffic to the system, trigger a race condition and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

50) Error handling

EUVDB-ID: #VU89001

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-26584

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an error when handling backlogging of crypto requests in net/tls/tls_sw.c. A remote attacker can send specially crafted traffic to the system and perform a denial of service attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

51) Use-after-free

EUVDB-ID: #VU90210

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26800

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the struct_group(), tls_do_decryption() and tls_decrypt_sg() functions in net/tls/tls_sw.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

52) Memory leak

EUVDB-ID: #VU94203

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-40910

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ax25_accept() function in net/ax25/af_ax25.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

53) Input validation error

EUVDB-ID: #VU94508

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41009

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the __aligned(), bpf_ringbuf_alloc(), bpf_ringbuf_restore_from_rec() and __bpf_ringbuf_reserve() functions in kernel/bpf/ringbuf.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

54) Input validation error

EUVDB-ID: #VU94530

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41011

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the kfd_ioctl_alloc_memory_of_gpu(), criu_restore_memory_of_gpu() and kfd_mmio_mmap() functions in drivers/gpu/drm/amd/amdkfd/kfd_chardev.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

55) NULL pointer dereference

EUVDB-ID: #VU94977

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41062

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the l2cap_sock_kill(), l2cap_sock_new_connection_cb() and l2cap_sock_recv_cb() functions in net/bluetooth/l2cap_sock.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

56) Resource management error

EUVDB-ID: #VU95068

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42077

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ocfs2_extend_trans() function in fs/ocfs2/journal.c, within the ocfs2_dio_end_io_write() function in fs/ocfs2/aops.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

57) Use-after-free

EUVDB-ID: #VU95503

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42232

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the delayed_work() and EXPORT_SYMBOL() functions in net/ceph/mon_client.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

58) Use-after-free

EUVDB-ID: #VU96105

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42271

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the iucv_sever_path() function in net/iucv/af_iucv.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

59) Memory leak

EUVDB-ID: #VU96290

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43861

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the qmimux_rx_fixup() function in drivers/net/usb/qmi_wwan.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

60) Improper locking

EUVDB-ID: #VU96295

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43882

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the bprm_fill_uid() function in fs/exec.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

61) Input validation error

EUVDB-ID: #VU96493

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43883

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the vhci_urb_enqueue(), vhci_shutdown_connection() and vhci_device_reset() functions in drivers/usb/usbip/vhci_hcd.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

62) Memory leak

EUVDB-ID: #VU96711

Risk: Low

CVSSv4.0: 5.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2024-44947

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: Yes

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the fuse_notify_store() function in fs/fuse/dev.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Live Patching: 15-SP3

SUSE Linux Enterprise Micro for Rancher: 5.2

SUSE Linux Enterprise Server 15 SP3 Business Critical Linux: 15-SP3

SUSE Linux Enterprise High Availability Extension 15: SP3

SUSE Linux Enterprise Server for SAP Applications 15: SP3

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15: SP3

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2

SUSE Linux Enterprise Micro: 5.1 - 5.2

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

kernel-64kb: before 5.3.18-150300.59.174.1

dtb-amlogic: before 5.3.18-150300.59.174.1

kernel-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-qcom: before 5.3.18-150300.59.174.1

kernel-64kb-debugsource: before 5.3.18-150300.59.174.1

dtb-hisilicon: before 5.3.18-150300.59.174.1

kernel-64kb-livepatch-devel: before 5.3.18-150300.59.174.1

dlm-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-nvidia: before 5.3.18-150300.59.174.1

dtb-broadcom: before 5.3.18-150300.59.174.1

dtb-altera: before 5.3.18-150300.59.174.1

kernel-64kb-devel: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb: before 5.3.18-150300.59.174.1

kernel-64kb-extra-debuginfo: before 5.3.18-150300.59.174.1

dtb-amd: before 5.3.18-150300.59.174.1

dtb-mediatek: before 5.3.18-150300.59.174.1

dtb-xilinx: before 5.3.18-150300.59.174.1

dlm-kmp-64kb: before 5.3.18-150300.59.174.1

gfs2-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-arm: before 5.3.18-150300.59.174.1

dtb-rockchip: before 5.3.18-150300.59.174.1

ocfs2-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-cavium: before 5.3.18-150300.59.174.1

dtb-marvell: before 5.3.18-150300.59.174.1

dtb-allwinner: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-sprd: before 5.3.18-150300.59.174.1

kselftests-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-exynos: before 5.3.18-150300.59.174.1

kernel-64kb-optional-debuginfo: before 5.3.18-150300.59.174.1

dtb-renesas: before 5.3.18-150300.59.174.1

kernel-64kb-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb: before 5.3.18-150300.59.174.1

dtb-al: before 5.3.18-150300.59.174.1

dtb-apm: before 5.3.18-150300.59.174.1

cluster-md-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

dtb-zte: before 5.3.18-150300.59.174.1

kernel-64kb-optional: before 5.3.18-150300.59.174.1

dtb-lg: before 5.3.18-150300.59.174.1

dtb-freescale: before 5.3.18-150300.59.174.1

reiserfs-kmp-64kb-debuginfo: before 5.3.18-150300.59.174.1

kernel-64kb-extra: before 5.3.18-150300.59.174.1

dtb-socionext: before 5.3.18-150300.59.174.1

dtb-aarch64: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debuginfo: before 5.3.18-150300.59.174.1

kernel-zfcpdump-debugsource: before 5.3.18-150300.59.174.1

kernel-zfcpdump: before 5.3.18-150300.59.174.1

kernel-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-extra-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-optional-debuginfo: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt: before 5.3.18-150300.59.174.1

dlm-kmp-preempt: before 5.3.18-150300.59.174.1

reiserfs-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-preempt: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt: before 5.3.18-150300.59.174.1

kernel-preempt-devel: before 5.3.18-150300.59.174.1

kernel-preempt-debugsource: before 5.3.18-150300.59.174.1

ocfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-optional: before 5.3.18-150300.59.174.1

kernel-preempt-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-preempt-extra: before 5.3.18-150300.59.174.1

gfs2-kmp-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-preempt-debuginfo: before 5.3.18-150300.59.174.1

kernel-livepatch-5_3_18-150300_59_174-preempt-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-preempt: before 1-150300.7.3.1

kernel-livepatch-SLE15-SP3_Update_48-debugsource: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default-debuginfo: before 1-150300.7.3.1

kernel-livepatch-5_3_18-150300_59_174-default: before 1-150300.7.3.1

kernel-default: before 5.3.18-150300.59.174.1

kernel-default-base-rebuild: before 5.3.18-150300.59.174.1.150300.18.103.1

gfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kselftests-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-optional-debuginfo: before 5.3.18-150300.59.174.1

dlm-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-devel-debuginfo: before 5.3.18-150300.59.174.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-build-debugsource: before 5.3.18-150300.59.174.1

kernel-default-devel: before 5.3.18-150300.59.174.1

kernel-syms: before 5.3.18-150300.59.174.1

ocfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-debugsource: before 5.3.18-150300.59.174.1

kernel-default-extra: before 5.3.18-150300.59.174.1

kselftests-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

cluster-md-kmp-default: before 5.3.18-150300.59.174.1

ocfs2-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-obs-qa: before 5.3.18-150300.59.174.1

dlm-kmp-default-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-debuginfo: before 5.3.18-150300.59.174.1

gfs2-kmp-default: before 5.3.18-150300.59.174.1

kernel-default-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-default-base: before 5.3.18-150300.59.174.1.150300.18.103.1

kernel-default-optional: before 5.3.18-150300.59.174.1

kernel-obs-build: before 5.3.18-150300.59.174.1

kernel-default-extra-debuginfo: before 5.3.18-150300.59.174.1

kernel-default-livepatch: before 5.3.18-150300.59.174.1

reiserfs-kmp-default: before 5.3.18-150300.59.174.1

kernel-debug-devel: before 5.3.18-150300.59.174.1

kernel-debug-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel: before 5.3.18-150300.59.174.1

kernel-kvmsmall-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-kvmsmall-livepatch-devel: before 5.3.18-150300.59.174.1

kernel-debug-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-devel-debuginfo: before 5.3.18-150300.59.174.1

kernel-debug-debugsource: before 5.3.18-150300.59.174.1

kernel-kvmsmall: before 5.3.18-150300.59.174.1

kernel-debug: before 5.3.18-150300.59.174.1

kernel-devel: before 5.3.18-150300.59.174.1

kernel-macros: before 5.3.18-150300.59.174.1

kernel-source: before 5.3.18-150300.59.174.1

kernel-docs-html: before 5.3.18-150300.59.174.1

kernel-source-vanilla: before 5.3.18-150300.59.174.1

kernel-docs: before 5.3.18-150300.59.174.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243249-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###