SUSE update for the Linux Kernel

1) Improper locking

EUVDB-ID: #VU96434

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48901

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the btrfs_maybe_wake_unfinished_drop() and btrfs_add_dead_root() functions in fs/btrfs/transaction.c, within the btrfs_find_orphan_roots() function in fs/btrfs/root-tree.c, within the btrfs_relocate_block_group() function in fs/btrfs/relocation.c, within the btrfs_drop_snapshot() and btrfs_free_path() functions in fs/btrfs/extent-tree.c, within the open_ctree() and close_ctree() functions in fs/btrfs/disk-io.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU96410

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48911

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nf_queue_entry_dup() function in net/netfilter/nfnetlink_queue.c, within the nf_queue_entry_release_refs(), nf_queue_entry_get_refs() and __nf_queue() functions in net/netfilter/nf_queue.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Buffer overflow

EUVDB-ID: #VU96443

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48923

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the lzo_decompress_bio() function in fs/btrfs/lzo.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU96409

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48935

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the __nft_release_table() function in net/netfilter/nf_tables_api.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Input validation error

EUVDB-ID: #VU96648

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48944

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the tg_nop(), sched_fork(), sched_post_fork(), set_user_nice(), __setscheduler_params() and sched_init() functions in kernel/sched/core.c, within the copy_process() function in kernel/fork.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Buffer overflow

EUVDB-ID: #VU97681

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48945

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the vivid_vid_cap_s_selection() function in drivers/media/platform/vivid/vivid-vid-cap.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Memory leak

EUVDB-ID: #VU89382

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52610

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists due memory leak in net/sched/act_ct.c. A local user can force the kernel to leak memory and perform denial of service attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Resource management error

EUVDB-ID: #VU96935

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52916

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the aspeed_video_get_resolution() and aspeed_video_set_resolution() functions in drivers/media/platform/aspeed/aspeed-video.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Resource management error

EUVDB-ID: #VU89397

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-26640

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the skb_advance_to_frag() function in net/ipv4/tcp.c. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Race condition

EUVDB-ID: #VU91479

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26759

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the swapcache_prepare() function in mm/swapfile.c, within the do_swap_page() and folio_unlock() functions in mm/memory.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Infinite loop

EUVDB-ID: #VU91415

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26767

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the link_validate_dpia_bandwidth() function in drivers/gpu/drm/amd/display/dc/link/link_validation.c, within the get_firmware_info_v3_2(), get_integrated_info_v11(), get_integrated_info_v2_1() and get_integrated_info_v2_2() functions in drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Use-after-free

EUVDB-ID: #VU90212

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26804

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the tnl_update_pmtu(), ip_md_tunnel_xmit() and ip_tunnel_xmit() functions in net/ipv4/ip_tunnel.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Improper locking

EUVDB-ID: #VU92039

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26837

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the switchdev_obj_eq() and switchdev_port_obj_del() functions in net/switchdev/switchdev.c, within the br_switchdev_mdb_replay_one() and br_switchdev_mdb_replay() functions in net/bridge/br_switchdev.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Resource management error

EUVDB-ID: #VU93179

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-37353

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the vp_find_vqs_msix() function in drivers/virtio/virtio_pci_common.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Use of uninitialized resource

EUVDB-ID: #VU92373

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-38538

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the EXPORT_SYMBOL_GPL() and br_dev_xmit() functions in net/bridge/br_device.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Race condition within a thread

EUVDB-ID: #VU92380

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-38596

CWE-ID: CWE-366 - Race Condition within a Thread

Exploit availability: No

The vulnerability allows a local user to manipulate data.

The vulnerability exists due to a data race within the unix_stream_sendmsg() function in net/unix/af_unix.c. A local user can manipulate data.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Memory leak

EUVDB-ID: #VU93020

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-38632

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the vfio_intx_enable() function in drivers/vfio/pci/vfio_pci_intrs.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Memory leak

EUVDB-ID: #VU94203

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-40910

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ax25_accept() function in net/ax25/af_ax25.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) NULL pointer dereference

EUVDB-ID: #VU94241

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-40973

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mtk_vcodec_fw_scp_init() function in drivers/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_scp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Resource management error

EUVDB-ID: #VU94304

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-40983

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the tipc_rcv() function in net/tipc/node.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) NULL pointer dereference

EUVDB-ID: #VU94977

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41062

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the l2cap_sock_kill(), l2cap_sock_new_connection_cb() and l2cap_sock_recv_cb() functions in net/bluetooth/l2cap_sock.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Resource management error

EUVDB-ID: #VU95073

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41082

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the nvmf_reg_read32(), nvmf_reg_read64() and nvmf_reg_write32() functions in drivers/nvme/host/fabrics.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Input validation error

EUVDB-ID: #VU95093

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42154

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the sizeof() function in net/ipv4/tcp_metrics.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Buffer overflow

EUVDB-ID: #VU96008

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42259

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the i915_error_to_vmf_fault() and vm_fault_gtt() functions in drivers/gpu/drm/i915/gem/i915_gem_mman.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Input validation error

EUVDB-ID: #VU96203

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42265

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the __releases() function in fs/file.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Improper error handling

EUVDB-ID: #VU96164

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42304

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the __ext4_read_dirblock(), ext4_empty_dir() and ext4_get_first_dir_block() functions in fs/ext4/namei.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Resource management error

EUVDB-ID: #VU96182

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42305

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the add_dirent_to_buf() and make_indexed_dir() functions in fs/ext4/namei.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Buffer overflow

EUVDB-ID: #VU96184

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42306

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the udf_sb_free_bitmap() function in fs/udf/super.c, within the read_block_bitmap() and __load_block_bitmap() functions in fs/udf/balloc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Use of uninitialized resource

EUVDB-ID: #VU96169

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43828

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the ext4_es_find_extent_range() function in fs/ext4/extents_status.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Buffer overflow

EUVDB-ID: #VU96544

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43890

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the get_free_elt(), tracing_map_clear() and tracing_map_create() functions in kernel/trace/tracing_map.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) NULL pointer dereference

EUVDB-ID: #VU96533

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43898

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ext4_da_do_write_end() function in fs/ext4/inode.c, within the __block_commit_write() function in fs/buffer.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Input validation error

EUVDB-ID: #VU96548

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43912

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the __nl80211_set_channel() function in net/wireless/nl80211.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Input validation error

EUVDB-ID: #VU96542

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43914

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the reshape_request() function in drivers/md/raid5.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU96522

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44935

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the __sctp_hash_endpoint() and __sctp_unhash_endpoint() functions in net/sctp/input.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Type Confusion

EUVDB-ID: #VU96639

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44944

CWE-ID: CWE-843 - Type confusion

Exploit availability: No

The vulnerability allows a local user to gain access to sensitive information.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Use-after-free

EUVDB-ID: #VU96658

Risk: Low

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2024-44946

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the kcm_sendmsg(), KCM_STATS_ADD(), sk->sk_write_space() and init_kcm_sock() functions in net/kcm/kcmsock.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

37) Input validation error

EUVDB-ID: #VU96889

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44948

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the mtrr_save_state() function in arch/x86/kernel/cpu/mtrr/mtrr.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Resource management error

EUVDB-ID: #VU96875

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44950

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the sc16is7xx_set_baud() function in drivers/tty/serial/sc16is7xx.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Improper locking

EUVDB-ID: #VU96857

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44952

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the make_driver_name() and module_remove_driver() functions in drivers/base/module.c, within the dev_uevent() and uevent_show() functions in drivers/base/core.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Improper locking

EUVDB-ID: #VU96859

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44954

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the line6_data_received() function in sound/usb/line6/driver.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Input validation error

EUVDB-ID: #VU96890

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44967

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the mga_i2c_read_gpio(), mga_gpio_getscl() and mgag200_i2c_init() functions in drivers/gpu/drm/mgag200/mgag200_i2c.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Buffer overflow

EUVDB-ID: #VU96885

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44969

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the sclp_sd_store_data() function in drivers/s390/char/sclp_sd.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

43) Buffer overflow

EUVDB-ID: #VU96876

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44970

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the drivers/net/ethernet/mellanox/mlx5/core/en_rx.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Memory leak

EUVDB-ID: #VU96832

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44971

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the bcm_sf2_mdio_register() function in drivers/net/dsa/bcm_sf2.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

45) Out-of-bounds read

EUVDB-ID: #VU96844

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44977

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the ta_if_load_debugfs_write() function in drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

46) Memory leak

EUVDB-ID: #VU96828

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44982

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the dpu_plane_prepare_fb() function in drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

47) Use-after-free

EUVDB-ID: #VU96838

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44986

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ip6_finish_output2() function in net/ipv6/ip6_output.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

48) Use-after-free

EUVDB-ID: #VU96839

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44987

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ip6_send_skb() function in net/ipv6/ip6_output.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

49) Out-of-bounds read

EUVDB-ID: #VU96845

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44988

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the mv88e6xxx_g1_atu_prob_irq_thread_fn() function in drivers/net/dsa/mv88e6xxx/global1_atu.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

50) NULL pointer dereference

EUVDB-ID: #VU96847

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44989

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the bond_ipsec_del_sa_all() function in drivers/net/bonding/bond_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

51) NULL pointer dereference

EUVDB-ID: #VU96848

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44990

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the bond_ipsec_offload_ok() function in drivers/net/bonding/bond_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

52) Use-after-free

EUVDB-ID: #VU96842

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44998

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the dequeue_rx() function in drivers/atm/idt77252.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

53) Use of uninitialized resource

EUVDB-ID: #VU96870

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44999

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the gtp_dev_xmit() function in drivers/net/gtp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Public Cloud Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-devel-azure: before 5.14.21-150500.33.69.1

kernel-source-azure: before 5.14.21-150500.33.69.1

kernel-azure-vdso-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-vdso: before 5.14.21-150500.33.69.1

kernel-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-optional: before 5.14.21-150500.33.69.1

kernel-azure-extra-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-syms-azure: before 5.14.21-150500.33.69.1

kernel-azure-livepatch-devel: before 5.14.21-150500.33.69.1

dlm-kmp-azure: before 5.14.21-150500.33.69.1

gfs2-kmp-azure: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure: before 5.14.21-150500.33.69.1

kernel-azure-devel-debuginfo: before 5.14.21-150500.33.69.1

ocfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

dlm-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-debugsource: before 5.14.21-150500.33.69.1

cluster-md-kmp-azure: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

gfs2-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-extra: before 5.14.21-150500.33.69.1

kernel-azure-optional-debuginfo: before 5.14.21-150500.33.69.1

kernel-azure-devel: before 5.14.21-150500.33.69.1

reiserfs-kmp-azure: before 5.14.21-150500.33.69.1

kselftests-kmp-azure-debuginfo: before 5.14.21-150500.33.69.1

• cpe:2.3:o:suse:public_cloud_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-devel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-azure-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-azure:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-azure-debuginfo:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2024/suse-su-20243587-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

54) NULL pointer dereference

EUVDB-ID: #VU96850

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-45000

CWE-ID: CWE-476 - NULL Pointer Dereference