SUSE update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

Published: 2024-10-17

Risk	Medium
Patch available	YES
Number of vulnerabilities	5
CVE-ID	CVE-2024-35861 CVE-2024-36899 CVE-2024-36964 CVE-2024-40954 CVE-2024-41059
CWE-ID	CWE-416 CWE-269 CWE-908
Exploitation vector	Local network
Public exploit	N/A
Vulnerable software	SUSE Linux Enterprise Micro Operating systems & Components / Operating system SUSE Linux Enterprise Live Patching Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system kernel-livepatch-5_14_21-150500_55_28-default Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150500_55_44-default Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150500_55_39-default Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150500_55_39-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150500_55_44-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP5_Update_9-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP5_Update_8-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP5_Update_5-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150500_55_28-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP4_Update_20-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150400_24_100-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150400_24_100-default Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP4_Update_21-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150400_24_97-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150400_24_103-default Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP4_Update_22-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150400_24_103-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-5_14_21-150400_24_97-default Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 5 vulnerabilities.

1) Use-after-free

EUVDB-ID: #VU90150

Risk: Medium

CVSSv4.0: 4.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-35861

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the cifs_signal_cifsd_for_reconnect() function in fs/smb/client/connect.c. A remote non-authenticated attacker can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel (Live Patch 9 for SLE 15 SP5) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.3 - 5.5

SUSE Linux Enterprise Live Patching: 15-SP4 - 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP4 - SP5

SUSE Linux Enterprise Server 15: SP4 - SP5

SUSE Linux Enterprise Real Time 15: SP4 - SP5

SUSE Linux Enterprise High Performance Computing 15: SP4 - SP5

openSUSE Leap: 15.4 - 15.5

kernel-livepatch-5_14_21-150500_55_28-default: before 14-150500.2.1

kernel-livepatch-5_14_21-150500_55_44-default: before 11-150500.2.1

kernel-livepatch-5_14_21-150500_55_39-default: before 12-150500.2.1

kernel-livepatch-5_14_21-150500_55_39-default-debuginfo: before 12-150500.2.1

kernel-livepatch-5_14_21-150500_55_44-default-debuginfo: before 11-150500.2.1

kernel-livepatch-SLE15-SP5_Update_9-debugsource: before 11-150500.2.1

kernel-livepatch-SLE15-SP5_Update_8-debugsource: before 12-150500.2.1

kernel-livepatch-SLE15-SP5_Update_5-debugsource: before 14-150500.2.1

kernel-livepatch-5_14_21-150500_55_28-default-debuginfo: before 14-150500.2.1

kernel-livepatch-SLE15-SP4_Update_20-debugsource: before 12-150400.2.1

kernel-livepatch-5_14_21-150400_24_100-default-debuginfo: before 12-150400.2.1

kernel-livepatch-5_14_21-150400_24_100-default: before 12-150400.2.1

kernel-livepatch-SLE15-SP4_Update_21-debugsource: before 12-150400.2.1

kernel-livepatch-5_14_21-150400_24_97-default-debuginfo: before 12-150400.2.1

kernel-livepatch-5_14_21-150400_24_103-default: before 10-150400.2.1

kernel-livepatch-SLE15-SP4_Update_22-debugsource: before 10-150400.2.1

kernel-livepatch-5_14_21-150400_24_103-default-debuginfo: before 10-150400.2.1

kernel-livepatch-5_14_21-150400_24_97-default: before 12-150400.2.1

CPE2.3

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20243670-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU90048

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36899

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the gpio_chrdev_release() function in drivers/gpio/gpiolib-cdev.c. A local user can escalate privileges on the system.